CVE-2026-60279

...

CVE-2026-60272

CVE-2026-60272 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Coherence and potentially take over the compon...

CVE-2026-60265

...

CVE-2026-60257

The CVE-2026-60257 entry concerns Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over TCP with no authentication, enabling takeover of Oracle Coherence as described in the sources. The CVSS v3...

CVE-2026-60257

...

CVE-2026-60253

CVE-2026-60253 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Impacted versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. An unauthenticated, network-accessible attacker via TCP can take over Oracle Coherence. CVSS v3.1 base score 9.8 (C/H/I/A). Exploitation details are n...

CVE-2026-60244

...

CVE-2026-60230

...

CVE-2026-60218

CVE-2026-60218 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. The vulnerability can be exploited by a low-privilege attacker with network access via TCP to take over Oracle Coherence. CVSS 3.1 base score 8.8 (High) w...

CVE-2026-60208

CVE-2026-60208 affects Oracle WebLogic Server (Fusion Middleware) core component. Vulnerable versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, potentially leading to unauthorized c...

CVE-2026-60205

Oracle WebLogic Server (Fusion Middleware Core) is affected in versions 12.2.1.4.0 and 14.1.2.0.0. The CVE-2026-60205 vulnerability allows unauthenticated, network-accessed takeover via TCP, with CVSS 3.1 base score 9.8 (CRITICAL). Documents do not provide exploit code, in-the-wild exploitation s...

CVE-2026-60206

...

CVE-2026-60202

...

CVE-2026-60181

...

CVE-2026-60174

Technical details for CVE-2026-60174 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE/NVD sources.

CVE-2026-60172

CVE-2026-60172 affects Oracle Autonomous Health Framework (AHF) via the Developer triaging platform. Versions 26.0.0, 26.1.0, and 26.2.0 are affected. The vulnerability is locally exploitable and requires high privileges with user interaction; successful exploitation can lead to takeover of AHF a...

CVE-2026-60166

CVE-2026-60166 affects Oracle Java SE JavaFX. Affected product/version: Oracle Java SE 8u491. The vulnerability arises in JavaFX components and can be triggered by network-accessible vectors, with exploitation requiring user interaction. Successful exploitation could lead to unauthorized read acc...

CVE-2026-60159

...

CVE-2026-60145

The CVE-2026-60145 entry concerns Oracle MySQL: Server (Optimizer) and MySQL Cluster. Affected versions are MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability can be exploited by a high-privilege attacker with network access via...

CVE-2026-47059

CVE-2026-47059 affects Oracle Java SE and Oracle GraalVM offerings (Java SE component 2D). Affected versions include Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. The vulnerabi...