PT-2026-77504

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.4 Description An issue exists in the Web Runtime SEC component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77490

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77479

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue in the Runtime Tools component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77495

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue in the Runtime Tools component of Oracle WebCenter Portal allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2026-77487

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-77484

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized...

PT-2026-77489

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77491

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle WebCenter Portal. This issue requires human interaction from a...

PT-2026-77492

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the...

CVE-2026-67440: Missing Authorization

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the DEVICEBROWSE, DEVICENODEATTRIBUTE, HOSTINTERFACES, and DEVICETAGSREQUEST handlers in server/runtime/index.js return device-discovery, node-attribute, host-network-interface, and device-tag metadata...

CVE-2026-65985: Server-Side Request Forgery (SSRF)

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an authenticated non-admin runtime user to control property.address, causing the FUXA server to issue an outbound HTTP or...

CVE-2026-47719: Server-Side Request Forgery (SSRF)

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the DEVICEWEBAPIREQUEST and DEVICEPROPERTY Socket.IO handlers in server/runtime/index.js omit isSocketWriteAuthorized and accept attacker-controlled property.address or endpoint connection data. A remote...

CVE-2026-67442: Improper Access Control

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.3, DELETE /api/roles removes role definitions through server/runtime/users/usrstorage.js but does not remove the deleted role identifier from each user's info.roles array or the runtime usersMap cache. If a...

PT-2026-77494

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue exists in the Runtime Tools component of Oracle WebCenter Portal. An unauthenticated attacker with network access via HTTP can compromis...

PT-2026-80410

This report has been withdrawn with reason: "Report mistakenly added without having CVE / GHSA associated". github.com/lib/pq trusts the unsigned 32-bit length in every PostgreSQL backend frame and subtracts four without first checking that the wire length is at least four. A backend frame whose...

CVE-2026-61219: Improper Access Control

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCente...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, beats, envoy-gateway, witness, docker-fips, rke2-runtime-fips, prometheus, elastic-agent, splunk-otel-collector, opentelemetry-ebpf-instrumentation, kubescape-operator-fips, kubescape-server-fips, falcoctl, rke2-runtime, falcoctl-fips,...

ANT-2026-P7DSVPH6 · wasm-micro-runtime · Heap-buffer-overflow

heap-buffer-overflow critical GHSA-wj3p-xhqm-pffc Severity Claude critical · Security research firm critical · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-P7DSVPH6:...

Malicious code in runtime-health (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 947c67500453c29daa330afc7d05e5ab5eb6405c4da235d1d0b408b247489832 The OpenSSF Package Analysis project identified 'runtime-health' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2026-14116 Malicious code in runtime-health (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 947c67500453c29daa330afc7d05e5ab5eb6405c4da235d1d0b408b247489832 The OpenSSF Package Analysis project identified 'runtime-health' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...