CVE-2026-71131

...

CVE-2026-71122

Oracle Analytics BIE (version 26.01.0.0.0), Platform Security component, has a high-complexity, network-exploitable flaw requiring high privileges via HTTP; successful exploitation causes full product takeover with scope change to other products (CVSS 8.0). Oracle's August 2026 CPU advisory is th...

CVE-2026-71116

Oracle VM VirtualBox 7.2.14 Core component has a HIGH-severity local vulnerability (CVSS 7.5) exploitable by a high-privilege attacker logged into the host, potentially compromising the hypervisor and additional products (scope change). No fix version is specified in the provided documents. Monit...

CVE-2026-71106

Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet ) is affected by a vulnerability in versions 5.6.28.0–5.6.28.1 . An unauthenticated attacker with network access via HTTP can achieve full system takeover (complete compromise of confidentiality, integrity, and availability). ...

CVE-2026-71100

CVE-2026-71100 affects Oracle Database Server's RDBMS component across versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with network access via Oracle Net can exploit it to read a subset of database data. CVSS 3.1 score is 5.3 (MEDIUM). Oracle's August 2026 CPU adv...

CVE-2026-71092

CVE-2026-71092 affects the Lease Administration component of Oracle PeopleSoft Enterprise FIN Lease Administration version 9.2 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability (high complexity, no user interaction) to achieve unauthorized creation...

CVE-2026-71083

Oracle Agile PLM MCAD Connector CAX Client (affected version 3.6) has a low-severity (CVSS 1.8) local vulnerability requiring high privileges and user interaction; successful exploitation yields unauthorized read access to a subset of accessible data. No fix version or exploitation evidence is pr...

CVE-2026-71075

...

CVE-2026-71064

...

CVE-2026-71053

CVE-2026-71053 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Web Services Security component in version 6.2.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the product, resulting in ...

CVE-2026-71053

...

CVE-2026-71040

...

CVE-2026-71008

Oracle Commerce Experience Manager component in version 11.4.0 is affected by a network-reachable vulnerability exploitable by a high-privileged HTTP attacker, enabling unauthorized access to critical or all accessible data (CVSS 6.8, confidentiality impact). Exploitation details are not provided...

CVE-2026-70985

...

CVE-2026-70981

Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.

CVE-2026-70955

...

CVE-2026-70952

...

CVE-2026-70943

The Oracle Hyperion Financial Management Security component, version 11.2.25.0.000, is vulnerable to an unauthenticated, easily exploitable flaw requiring adjacent network access. Successful exploitation grants full confidentiality and integrity compromise of all accessible HFM data. CVSS 3.1 sco...

CVE-2026-70939

Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...

CVE-2026-70933

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable; a low-privileged network attacker can access all accessible data and cause partial DoS via HTTP. CVSS 7.1 (HIGH). No exploit or in-the-wild exploitation details provided. Patch status not specified in documents.