PT-2026-77916

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to...

PT-2026-78111

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authorization Engine component of Oracle Fusion Middleware allows a low privileged attacker with network access via TCP to compromise...

Linux Distros Unpatched Vulnerability : CVE-2026-72060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: ti: icssg: guard PA stat lookups icssgndogetstats64 unconditionally calls emacgetstatbyname with FW PA stat names regardless of whether the PA...

PT-2026-77504

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.4 Description An issue exists in the Web Runtime SEC component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

Linux Distros Unpatched Vulnerability : CVE-2026-62898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. CVE-2026-62898 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2026-72378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix error code in afsextractvladdrs The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on ever...

Linux Distros Unpatched Vulnerability : CVE-2026-72046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gve: fix header buffer corruption with header-split and HW-GRO The DQO RX datapath programs a per-buffer- queue-descriptor headerbufaddr at post time and reads...

PT-2026-77453

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector version 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector version 14.1.2.1.0 Description A flaw in the Core component of the Oracle Identity Manager Connector allow...

PT-2026-77503

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 through 9.2.26.4 Description A security flaw in the E1 IOT Orchestrator Security component allows a low privileged attacker with network access via HTTP to compromise the system. Th...

PT-2026-77429

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content. An unauthenticated attacker with network access via HTTP can...

PT-2026-77613

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 25.12 through 26.6 Description An issue exists in the Data Archival component of the Siebel CRM Administration product. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise...

PT-2026-78194

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-77412

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the PeopleCode component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-77944

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform version 11.4.0 Description A flaw in the Dynamo Application Framework component allows an unauthenticated attacker with network access via TCP to compromise the system. Successful exploitation can lead to a complete...

PT-2026-77901

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 3.2.18 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to a hang or a frequently...

PT-2026-77991

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Microsoft SharePoint Weak Authentication Vulnerability

Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network...

Apple macOS Improper Authentication Vulnerability

Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials...

PT-2026-77403

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 3.2.20 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorize...

PT-2026-78020

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in...