CVE-2026-91230

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation ca...

CVE-2026-91226

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . This high-complexity vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Oracle SO...

CVE-2026-91227

The Oracle SOA Suite product within Oracle Fusion Middleware (specifically the Fabric Layer component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the Oracle SOA Suite, po...

CVE-2026-91228

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Oracle SOA S...

CVE-2026-91224

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Suite,...

CVE-2026-91223

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Suite,...

CVE-2026-91219

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite within Oracle Fusion Middleware . This issue affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle SOA ...

CVE-2026-91221

The Oracle SOA Suite product of Oracle Fusion Middleware contains a vulnerability in the Fabric Layer component affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via T3 or IIOP can easily exploit this flaw to compromise the Oracle SOA Suite, ...

CVE-2026-91216

The Oracle SOA Suite (Oracle Fusion Middleware) is vulnerable in the Fabric Layer component of versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via T3 or IIOP can easily exploit this vulnerability to compromise the Oracle SOA Suite. A successful attack can resu...

CVE-2026-91217

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Orac...

CVE-2026-91218

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite within Oracle Fusion Middleware (affected versions 12.2.1.4.0 and 14.1.2.0.0 ). A low-privileged attacker with network access via HTTP can exploit this to compromise the Oracle SOA Suite, potentially gaining unauthorized cre...

CVE-2026-91214

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite (part of Oracle Fusion Middleware), specifically affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Sui...

CVE-2026-91215

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite (part of Oracle Fusion Middleware), specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle SOA Suite, potentia...

CVE-2026-94023

A ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one question about the pointer: does the object lie outside the module's own code and data. That is the policy for using an object, and using an object a module does not own is...

CVE-2026-12489

An incorrect authorization vulnerability in the Data Access Layer DAL of Zyxel EX3501-T0 firmware versions through 5.44ACHR.6C0 could allow an authenticated attacker to escalate privileges by modifying the loginprivilege data on an affected device...

CVE-2026-12489

An incorrect authorization vulnerability in the Data Access Layer DAL of Zyxel EX3501-T0 firmware versions through 5.44ACHR.6C0 could allow an authenticated attacker to escalate privileges by modifying the loginprivilege data on an affected device...

CVE-2026-12489

The Zyxel EX3501-T0 device is vulnerable to an incorrect authorization vulnerability within its Data Access Layer (DAL) in firmware versions up to and including 5.44(ACHR.6)C0 . An authenticated attacker can exploit this flaw to escalate privileges by modifying the login_privilege data on the aff...

EUVD-2026-104789

An incorrect authorization vulnerability in the Data Access Layer DAL of Zyxel EX3501-T0 firmware versions through 5.44ACHR.6C0 could allow an authenticated attacker to escalate privileges by modifying the loginprivilege data on an affected device...

CVE-2026-12489

An incorrect authorization vulnerability in the Data Access Layer DAL of Zyxel EX3501-T0 firmware versions through 5.44ACHR.6C0 could allow an authenticated attacker to escalate privileges by modifying the loginprivilege data on an affected device...

CLEANSTART-2026-ZY34480 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

Security vulnerability affects the grafana-fips package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...