CVE-2026-60590: Improper Access Control

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: POS. Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Oracle Linux 10 : unbound (ELSA-2026-55892)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55892 advisory. - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : gstreamer1-plugins-bad-free / and / gstreamer1-plugins-ugly-free (ELSA-2026-55865)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55865 advisory. - Fix ADPCM decoder negotiation and input size check CVE-2026-19387 Resolves: RHEL-235496 gstreamer1-plugins-ugly-free Tenable has extracted the...

Amazon Corretto Java 8.x < 8.504.01.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is 8 prior to 8.504.01.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2026-Aug-18 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ...

Oracle Linux 10 : pcp (ELSA-2026-55617)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55617 advisory. - Fix CVE-2026-16530: pmLogLoadInDom OOB pointer dereference RHEL-213746 - Fix CVE-2026-16531: pmproxy logger servlet path traversal RHEL-213756 - Fi...

Oracle Linux 9 : unbound (ELSA-2026-55841)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55841 advisory. 1.24.2-3.4 - Fix CVE-2026-55973 RHEL-212809 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

PT-2026-77551

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description A flaw in the Lifecycle Management component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorize...

PT-2026-78060

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6 Description A flaw in the CAX Client component allows a low privileged attacker with access to the physical communication segment attached to the hardware where the software executes to compromise th...

Oracle Linux 10 : haproxy (ELSA-2026-55679)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-55679 advisory. - Fix uint16t overflow in FCGI demux record length CVE-2026-55203 Resolves: RHEL-211068 Tenable has extracted the preceding description block directl...

Oracle Linux 9 : haproxy (ELSA-2026-55772)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-55772 advisory. - Fix NULL pointer dereference in hpackdhtinsert CVE-2026-55204 Resolves: RHEL-211082 Tenable has extracted the preceding description block directly...

PT-2026-77483

Name of the Vulnerable Software and Affected Versions Oracle Learning Management versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Learning Management product of Oracle E-Business Suite. An unauthenticated attacker with network access v...

CVE-2026-70688: Improper Access Control

Vulnerability in Oracle Essbase component: Calculator. The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover o...

PT-2026-77492

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-77832

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Financials for Asia/Pacific versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can...

PT-2026-77736

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager for Systems Infrastructure version 13.5 Oracle Enterprise Manager for Systems Infrastructure version 24.1 Description A flaw in the Storage Server Management component allows a low privileged attacker with network...

CVE-2026-70834: Improper Privilege Management

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-70831: Improper Privilege Management

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-70847: Improper Privilege Management

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-70914: Improper Access Control

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-70828: Improper Privilege Management

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...