CVE-2026-87131

A vulnerability in the Access and security component of Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ) allows a low-privileged attacker with network access via HTTP to compromise the product. The attack requires human interaction and involves a scope change , meaning it can...

EUVD-2026-79786

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87130

Oracle Hyperion Data Relationship Management (component: Access and security ) is affected in supported version 11.2.26.0.000 . The vulnerability allows an unauthenticated attacker with network access via SMTP to compromise the product. Successful exploitation results in unauthorized creation, de...

EUVD-2026-79787

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87128

A vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security ) affects version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this to achieve unauthorized creation, deletion, modification, and access to critical ...

EUVD-2026-79783

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

DsArk64

DsArk64 DsArk64.sys se distribuye con 360 Total Security. Firmado por WHQL de Microsoft. LOLDrivers: magicsword-io/LOLDrivers308. CVE: Solicitado MITRE. Primitivas Terminación de procesos ring 0 IOCTL 0x80863008, entrada: PID en bruto de 4 bytes El driver llama a ZwOpenProcessALLACCESS +...

CVE-2026-87129

Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ) has a vulnerability in the Access and security component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthorized creation, deletion, or m...

CVE-2026-87126

Oracle Report Manager (component: Reports Security ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 contains a network-exploitable vulnerability accessible via HTTP. A low-privileged attacker with network access can compromise the component, resulting in unauthorized access to critica...

EUVD-2026-79781

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Reports Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

EUVD-2026-79775

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

CVE-2026-83488

Oracle Fusion Middleware – Helidon (component: helidon-microprofile-security ) versions 4.0.0 through 4.5.4 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized update, insert, delete, and read access to a subset of d...

CVE-2026-83423

Oracle JDeveloper (Oracle Fusion Middleware, component: Security Framework ) is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover o...

EUVD-2026-79723

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDevelope...

CVE-2026-83340

CVE-2026-83340 affects Oracle Identity Manager (component: Security ) within Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of the Identity Manager instance, resulting in high...

EUVD-2026-79693

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

CVE-2026-83334

Oracle Web Services Manager (Oracle Fusion Middleware), component Web Services Security , versions 12.2.1.4.0 and 14.1.2.0.0 are affected by a difficult-to-exploit vulnerability allowing an unauthenticated attacker with network access via SOAP to gain unauthorized access to all accessible data an...

EUVD-2026-79687

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise...

EUVD-2026-79678

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-83325

CVE-2026-83325 affects the Platform Security component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), impacting versions 8.2.0.0.0 and 26.01.0.0.0 . The vulnerability is easily exploitable over HTTP by a high-privileged attacker with low complexity and no user interaction ...