CVE-2026-91396

A vulnerability exists in the Utility component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503 , 8u503-perf , and 11.0.32.1 ; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 ; and Oracle GraalVM Enterprise Edition...

CVE-2026-91395

A vulnerability exists in the Utility component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, and 11.0.32.1; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and Oracle GraalVM Enterprise Edition 21....

CVE-2026-91383

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Monitoring and Diagnostics SEC component. Affected versions include 9.2.0.0-9.2.26.5 . This difficult-to-exploit vulnerability allows a high privileged attacker with network access ...

CVE-2026-91381

A vulnerability exists in the 2D component of Oracle Java SE and Oracle GraalVM Enterprise Edition . The issue affects Oracle Java SE versions 8u503 and 8u503-perf , and Oracle GraalVM Enterprise Edition version 21.3.19.1.1 . An unauthenticated attacker with network access via multiple protocols ...

CVE-2026-91376

A vulnerability in the Web Access component of Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management allows a low-privileged attacker with network access via HTTP to compromise the system. The vulnerability is difficult to exploit and requires human interaction ...

CVE-2026-91373

A vulnerability exists in the JSSE component of Oracle Java SE (affected versions: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle GraalVM Enterprise Edition (21.3.19.1.1). An unauthenticated attacker with network access via...

CVE-2026-91374

A vulnerability in the Serviceability component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition allows an unauthenticated attacker with network access to compromise the systems. The flaw is difficult to exploit but can result in unauthorized read, update, insert...

CVE-2026-91335

A vulnerability exists in the AWT component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle G...

CVE-2026-91333

A vulnerability exists in the Security component of Oracle Java SE affecting versions 21.0.12.1 , 25.0.4.1 , and 27 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability, which is difficult to trigger. Successful exploitation can result in unautho...

CVE-2026-91334

A vulnerability exists in the ImageIO component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE : 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK : 17.0.20.1 and 21.0.12.1; a...

CVE-2026-91332

A vulnerability exists in the Networking component of Oracle Java SE , affecting versions 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 . It also impacts Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1) and Oracle GraalVM Enterprise Edition (21.3.19.1.1). An unauthenticated attacker ...

CVE-2026-91285

A vulnerability exists in the E1 IOT Orchestrator Security component of the JD Edwards EnterpriseOne Orchestrator product by Oracle JD Edwards , affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the orchestrator, pote...

CVE-2026-91250

A vulnerability exists in the Oracle SOA Suite product of Oracle Fusion Middleware within the Adapters component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via multiple protocols can exploit this vulnerability to compromise the Oracle SOA ...

CVE-2026-91241

A critical vulnerability exists in the Analytics Web Administration component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics). Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A high-privileged attacker with network access via HTTP can exploit this flaw t...

CVE-2026-91239

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via multiple protocols can easily exploit this flaw to compromise the Oracle S...

CVE-2026-87375

A vulnerability exists in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthoriz...

CVE-2026-87366

A vulnerability exists in the Web Utilities component of the Oracle Applications Framework product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Applications Fra...

CVE-2026-87362

The Oracle Agile PLM product (Oracle Supply Chain) is affected by a vulnerability in the Folders, Files & Attachments component in version 9.3.6 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unau...

CVE-2026-87364

A vulnerability exists in the Core component of the Oracle Service Bus product within Oracle Fusion Middleware , specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the service, potentially...

CVE-2026-87347

A vulnerability exists in the Oracle HTTP Server product of Oracle Fusion Middleware , specifically within the OSSL Module . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the server, potentially gai...