Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion

Barco Control Room Management through Suite 2.9 Build 0275 is vulnerable to local file inclusion that could allow attackers to access sensitive information and components. Requests must begin with the "GET /...." substring. id: CVE-2022-26233 info: name: Barco Control Room Management Suite =2.9...

Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (October 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the October 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workfl...

EUVD-2026-106612

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Case management Service 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

EUVD-2026-106498

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-106477

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to...

EUVD-2026-106475

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106468

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: BPM Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-91358

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Case management Service 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2026-91243

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-91220

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-91222

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to...

CVE-2026-91213

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: BPM Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-91358

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (specifically the Case management Service (11g+) component). Affected supported versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easi...

CVE-2026-91243

A vulnerability exists in the Fabric Layer component of the Oracle Business Process Management Suite (part of Oracle Fusion Middleware). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the suit...

CVE-2026-91222

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the Human Workflow (11g+) component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can easily exploit thi...

CVE-2026-91220

The Oracle Business Process Management Suite (Oracle Fusion Middleware) is affected by a vulnerability in the Human Workflow component. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to ...

CVE-2026-91213

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the BPM Composer component. This affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this v...

PT-2026-114782

Apply the DSA-2026-405 security update for Dell Wyse Management Suite to fix four XSS flaws, including critical bug CVE-2026-82158 CVSS 9.0. Dell WyseManagementSuite Cybersecurity Vulnerability XSS InfoSec https://t.co/PeIVNUn0pa...

Dell Wyse Management Suite < 2605.0.3.683 Multiple Vulnerabilities (DSA-2026-387)

The version of Dell Wyse Management Suite installed on the remote host is prior to 2605.0.3.683. It is, therefore, affected by multiple vulnerabilities, including: - Dell Wyse Management Suite WMS, versions prior to WMS 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type...

CVE-2026-81235

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...