CVE-2026-60537

CVE-2026-60537 affects Oracle Fusion Middleware’s Oracle Managed File Transfer (MFT) Runtime Server. Affects 12.2.1.4.0 and 14.1.2.0.0. The issue allows a low-privileged attacker with network access over HTTP to compromise MFT, with potential takeover of the MFT component and impact to confidenti...

CVE-2026-60527

CVE-2026-60527 affects Oracle WebLogic Server (Console component) in 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated user with logon to the host running WebLogic to compromise the server, with high confidentiality impact and a local attack vector (scope changed). No exploit...

CVE-2026-60496

...

CVE-2026-60427

CVE-2026-60427 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware, impacting versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by an unauthenticated attacker over the network via LDAP to compromise data integrity and confidentiality, with scope change pot...

CVE-2026-60418

CVE-2026-60418 concerns Oracle Fusion Middleware’s Oracle Unified Directory (OUD Core). Affected are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by a high-privilege attacker with network access via LDAP to compromise OUD, potentially resulting in takeover of Oracle Unified Direc...

CVE-2026-60317

...

CVE-2026-60233

...

CVE-2026-60230

...

CVE-2026-60199

...

CVE-2026-60181

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

CVE-2026-60181

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

CVE-2026-60178

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

CVE-2026-60172

CVE-2026-60172 affects Oracle Autonomous Health Framework (AHF) via the Developer triaging platform. Versions 26.0.0, 26.1.0, and 26.2.0 are affected. The vulnerability is locally exploitable and requires high privileges with user interaction; successful exploitation can lead to takeover of AHF a...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is is susceptible to multiple Netty vulnerabilities CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585

Summary Netty is used by IBM DevOps Deploy / IBM UrbanCode Deploy UCD for network communication. CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585. Vulnerability Details CVEID:CVE-2026-42580 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to...

CVE-2026-60163

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allow...

CVE-2026-60163

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allow...

CVE-2026-47059

...

CVE-2026-47032

...

CVE-2026-46993

CVE-2026-46993 affects Oracle Enterprise Manager Base Platform (component: Agent Next Gen). Affected versions: 13.5 and 24.1. The vulnerability, exploitable by a low-privileged attacker with network access over HTTPS, can compromise the Base Platform, potentially enabling unauthorized creation, d...

CVE-2026-46936

CVE-2026-46936 affects Oracle MySQL Server (component: Server: DDL) and MySQL Cluster. Affected versions include MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability is described as difficult to exploit and requires network access via...