CVE-2026-87272

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local privilege escalation vulnerability (CVE-2026-87272). A low-privileged attacker with logon access to the host can exploit this with low complexity and no user interaction to achieve full confidentiality, integrity, and availabil...

EUVD-2026-79923

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-87271

A vulnerability in the Core component of Oracle VM VirtualBox version 7.2.16 (Windows host only) allows a low-privileged local attacker to achieve takeover of the product. The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity, no user interaction required, and high impact on confidentiali...

CVE-2026-87269

CVE-2026-87269 affects Oracle VM VirtualBox 7.2.16 (component: Core ), applying to Windows hosts only . An easily exploitable vulnerability allows a low-privileged local attacker with logon to the host to achieve full takeover of VirtualBox, impacting confidentiality, integrity, and availability ...

EUVD-2026-79919

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of thi...

CVE-2026-87265

CVE-2026-87265 affects the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue ), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Purchasing, resulting in unauthorized creation, d...

EUVD-2026-79917

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

CVE-2026-87267

Oracle VM VirtualBox (Oracle Virtualization), component Core , version 7.2.16 is affected by a denial-of-service vulnerability. A low-privileged attacker with network access via RDP can trigger a hang or frequently repeatable crash, resulting in a complete loss of availability. The attack complex...

CVE-2026-87260

Oracle Agile Engineering Data Management (Oracle Supply Chain), component Engineering Communication Interface , version 6.2.1 is affected by an easily exploitable vulnerability (CVSS 3.1: 7.3 HIGH ). An attacker with low privileges and access to the physical communication segment attached to the ...

EUVD-2026-79913

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication...

CVE-2026-87261

CVE-2026-87261 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Engineering Communication Interface component in supported version 6.2.1 . A low-privileged attacker with local logon can exploit this vulnerability to achieve unauthorized access to critical d...

EUVD-2026-79916

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

EUVD-2026-79914

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

CVE-2026-87264

CVE-2026-87264 affects the Integration Broker component of Oracle PeopleSoft Enterprise PeopleTools , versions 8.61 through 8.63 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker without user interaction, resulting in unauthorized creation, deletion, or mod...

EUVD-2026-79910

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: SDK. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. While the vulnerability is in Oracle...

CVE-2026-87258

Oracle Agile PLM (Oracle Supply Chain) is affected in component Folders, Files & Attachments on supported version 9.3.6 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires human interaction from a user other than the att...

CVE-2026-87259

CVE-2026-87259 affects the Engineering Communication Interface component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . A low-privileged attacker with local logon access can exploit this vulnerability to achieve high confidentiality and integrity impacts , incl...

EUVD-2026-79912

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

EUVD-2026-79911

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

EUVD-2026-79909

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. While the vulnerability...