CVE-2026-47038: Missing Authentication for Critical Function

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise RDBMS...

CVE-2026-46876: Improper Access Control

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can...

PT-2026-62257

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an authenticated attacker with low...

PT-2026-62200

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw exists in the Java VM component. A low privileged attacker with...

PT-2026-62144

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an unauthenticated attacker with...

PT-2026-62201

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the Oracle Net Services component allows an unauthenticated...

PT-2026-62206

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an unauthenticated attacker with network access via Oracle Net to compromise the system. This can lead to a complete Denial of Service DOS ...

PT-2026-62274

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 9.7.0 through 9.7.1 Description An issue in the MySQL Connectors product allows an unauthenticated attacker with network access via multiple protocols to compromise the system. Successful exploitation can...

Oracle Linux 10 : git-lfs (ELSA-2026-39272)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-39272 advisory. - Fix CVE-2026-39821 in vendored golang.org/x/net idna package Tenable has extracted the preceding description block directly from the Oracle Linux security...

PT-2026-62275

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 9.7.0 through 9.7.1 Description A flaw in the MySQL Connectors product allows a low privileged attacker with network access via multiple protocols to compromise the system. Successful exploitation can lead t...

CVE-2026-60192: Improper Access Control

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

CVE-2026-60193: Improper Access Control

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the...

CVE-2026-60317: Improper Access Control

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

CVE-2026-47045: URL Redirection to Untrusted Site

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise JDBC. Successf...

CVE-2026-47060: Improper Access Control

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise JDBC. Successful attacks require hum...

The vulnerability of the devl_rate_nodesdestroy() function in the net/devlink/rate.c module, a implementation of networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the devlratenodesdestroy function in the net/devlink/rate.c module, which is part of the Linux kernel’s networking functions, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-61211: Improper Access Control

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Execute DBMSCLOUD privilege with network access via Oracle Net to compromise RDBMS. While...

git-lfs security update

3.7.1-6 - Rebuild with new Golang 3.7.1-5 - Fix CVE-2026-39821 in vendored golang.org/x/net idna package 3.7.1-4 - Rebuild with new Golang...

PT-2026-62399

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 9.7.0 through 9.7.1 Description An issue in the MySQL Connectors product allows an unauthenticated attacker with network access via multiple protocols to compromise the system. Successful exploitation can le...

Fedora 44 : kernel (2026-2dd8b600bb)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2dd8b600bb advisory. The 7.1.4-102/202 stable kernel updates contain a few important fixes across the tree. ---- The 7.1.4-101/201 stable kernel update contains a fix for a rathe...