CVE-2026-87147

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a network-accessible vulnerability exploitable via HTTP. A high-privileged attacker with high attack complexity can achieve unauthorized creation, deletion, or modification of da...

CVE-2026-87143

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the product. The attack complexity is rated high (CVSS 3.1: 7.4 , AV:N/AC:H/PR:N...

CVE-2026-87139

Oracle Hyperion Data Relationship Management (component: Access and security ) version 11.2.26.0.000 is affected by a network-based vulnerability that allows a low-privileged attacker with HTTP access to compromise the product. The vulnerability is rated difficult to exploit but, if successful, r...

CVE-2026-87140

A vulnerability in the Access and security component of Oracle Hyperion Data Relationship Management (affected version 11.2.26.0.000 ) allows a low-privileged attacker with network access via HTTP to achieve takeover of the product, impacting confidentiality, integrity, and availability (CVSS 3.1...

CVE-2026-87130

Oracle Hyperion Data Relationship Management (component: Access and security ) is affected in supported version 11.2.26.0.000 . The vulnerability allows an unauthenticated attacker with network access via SMTP to compromise the product. Successful exploitation results in unauthorized creation, de...

CVE-2026-83491

Oracle iRecruitment (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the product. The attack vector is adjace...

CVE-2026-83489

This vulnerability affects Oracle Banking Origination (Oracle Financial Services Applications), specifically the Onboarding Batch Processes component, in supported versions 14.5.0.0.0 through 14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which...

CVE-2026-83483

Oracle Advanced Benefits (part of Oracle E-Business Suite) contains a vulnerability in the Self-serv What-if Analysis component affecting versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability, which is rated as difficult to exploi...

CVE-2026-83464

Oracle Mobile Application Server (component: MWA Terminal Server ), part of Oracle E-Business Suite, is affected in versions 12.2.3 through 12.2.15 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via TCP to achieve full takeover of the server, with hi...

CVE-2026-83463

Oracle Mobile Application Server (MWA Terminal Server component of Oracle E-Business Suite , versions 12.2.3–12.2.15) is affected by a vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to achieve full takeover of the server, impacting...

CVE-2026-83451

CVE-2026-83451 affects the Oracle Product Workbench component of Oracle E-Business Suite, specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, despi...

CVE-2026-83450

Oracle E-Business Suite – Bills of Material (component: Setup Workbench ) is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a high-privileged attacker with network access via HTTP to compromise the product. The vulnerability carries a scope change , mea...

CVE-2026-89027

miniOrange JWT Authentication for WP REST APIs plugin for WordPress (before 4.8.0 ) contains an authentication method downgrade vulnerability. An unauthenticated attacker can supply a specific GET parameter that bypasses capability checks and nonce verification, forcing the plugin to use Basic HT...

CVE-2026-89027 miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET parameter without any capability check or...

CVE-2026-83441

Oracle E-Business Suite – Product Hub (component: Internal Operations) in supported versions 12.2.3 through 12.2.15 contains a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...

CVE-2026-83438

CVE-2026-83438 affects the Oracle Engineering product (component: Internal Operations ) of Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which is rated CVSS 3.1 8.2 (HIGH) with a scope change , mea...

CVE-2026-83435

Oracle E-Business Suite – Bills of Material (Internal Operations) is vulnerable in supported versions 12.2.13–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficulty-rated vulnerability to achieve unauthorized creation, deletion, modification, or access to cri...

CVE-2026-83415

Oracle Coherence (Core component) of Oracle Fusion Middleware is affected by a vulnerability in supported versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . The vulnerability allows a low-privileged attacker with network access via HTTP to fully compromise the product, resulting in ...

CVE-2026-83418

Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The attack is rated as difficult to exploit (high complexity, n...

CVE-2020-12928

CVE-2020-12928 LPE Exploit code This repo is for learning purpose only . demo Reference: https://h0mbre.github.io/RyzenMasterCVE/ https://movaxbx.ru/2020/10/14/cve-2020-12928-exploit-proof-of-concept-privilege-escalation-in-amd-ryzen-master-amdryzenmasterdriver-sys/...