EUVD-2026-79348

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-83020

CVE-2026-83020 is a critical vulnerability (CVSS 3.1: 10.0) in Oracle Platform Security for Java (Oracle Fusion Middleware), specifically in the Centralized Thirdparty Jars component. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via H...

CVE-2026-83011

Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component, is affected by a vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw, though it is rated...

EUVD-2026-79339

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-83000

Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler ) is vulnerable to a critical, easily exploitable flaw in versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the platform, resulting in full takeover (high im...

EUVD-2026-79328

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service...

EUVD-2026-79325

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

CVE-2026-82997

CVE-2026-82997 is a CRITICAL (CVSS 9.9) vulnerability in Oracle Fusion Middleware Service Delivery Platform , specifically the Messaging Enabler component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this with low complex...

EUVD-2026-79324

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

EUVD-2026-79327

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Service...

EUVD-2026-79326

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

CVE-2026-82998

Oracle Fusion Middleware 's Service Delivery Platform (component: Messaging Enabler ) in versions 12.2.1.4.0 and 14.1.2.0.0 is affected by a critical vulnerability allowing a low-privileged attacker with network access via T3 or IIOP to take over the Service Delivery Platform. The scope change me...

CVE-2026-82996

CVE-2026-82996 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Supported versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. A low-privileged attacker with logon to the infrastructure where the product executes can exploit...

CVE-2026-82994

CVE-2026-82994 is a critical vulnerability (CVSS 3.1: 9.8 ) in Oracle Platform Security for Java (component: Centralized Thirdparty Jars ) within Oracle Fusion Middleware. Supported versions 12.2.1.4.0 and 14.1.2.0.0 are affected. An unauthenticated attacker with network access via LDAP can explo...

EUVD-2026-79322

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to...

CVE-2026-82995

CVE-2026-82995 affects the Oracle Platform Security for Java product (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Supported versions 12.2.1.4.0 and 14.1.2.0.0 are vulnerable. The flaw allows an unauthenticated attacker with network access via SOAP to comprom...

EUVD-2026-79323

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to...

CVE-2026-81899

creationtimestamp| type| source ---|---|--- 2026-09-15 19:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gmhvygrxjesmj 2026-09-16 06:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmioblaxp2r...

CVE-2026-48785

Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix matching to the limit container paths directive in apptainer.conf, so an allowed path such as /data/safe also authorizes a sibling path such as /data/safe-but-unsafe. A local...

CVE-2026-48785

In Apptainer (open-source container platform) prior to v1.5.1 , the limit container paths directive in apptainer.conf uses plain string-prefix matching in Image.AuthorizedPath. This means an allowed path such as /data/safe also authorizes a sibling like /data/safe-but-unsafe, allowing a local use...