PT-2026-77640

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the...

PT-2026-77662

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Report...

PT-2026-77648

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via IIOP Internet Inter-ORB Protocol, a protocol...

PT-2026-77656

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Reports...

PT-2026-77673

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 14.1.2.0.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with access to the physical communication segment attached to the...

PT-2026-77652

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the...

PT-2026-77639

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description A security and authentication issue exists in the Oracle Reports Developer product of Oracle Fusion Middleware. An unauthenticated attacker with access to the physical communication...

PT-2026-77660

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Repor...

PT-2026-77657

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attach...

PT-2026-77643

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via UDP can exploit this flaw to compromise the...

CVE-2026-62624: Improper Access Control

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle Repor...

PT-2026-77658

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Report...

PT-2026-77668

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 14.1.2.0.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the...

BIT-GITLAB-2026-4672 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with guest-role permissions to access test report contents they were not authorized to...

PT-2026-73300

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with guest-role permissions to access test report contents they were not authorized to...

CVE-2026-73634: Uncontrolled Resource Consumption

Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Content Security Policy violation reports reads the submitted report into memory without bounding how much it will accept, so a single request can exhaust the heap and deny service...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nerdctl, k3s, cilium, spire-server, falco-no-driver, nemo, prometheus-mongodb-exporter, langfuse-fips, trino, commercial-kyverno, reports-server, commercial-expanso-edge, k3d, zot, kots, upwind-agent, containerd, cert-manager, commercial-grafana,...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nerdctl, k3s, cilium, spire-server, falco-no-driver, nemo, prometheus-mongodb-exporter, langfuse-fips, trino, commercial-kyverno, reports-server, commercial-expanso-edge, k3d, zot, kots, upwind-agent, containerd, cert-manager, commercial-grafana,...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nerdctl, k3s, cilium, spire-server, falco-no-driver, nemo, prometheus-mongodb-exporter, langfuse-fips, trino, commercial-kyverno, reports-server, commercial-expanso-edge, k3d, zot, kots, upwind-agent, containerd, cert-manager, commercial-grafana,...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nerdctl, k3s, cilium, spire-server, falco-no-driver, nemo, prometheus-mongodb-exporter, langfuse-fips, trino, commercial-kyverno, reports-server, commercial-expanso-edge, k3d, zot, kots, upwind-agent, containerd, cert-manager, commercial-grafana,...