June 9, 2026—KB5095051 (OS Build 28000.2269)

None None...

May 12, 2026—KB5089548 (OS Build 28000.2113)

None None...

CVE-2026-54423

A malicious user with access to deploy a node directly via Ironic can specify the IPMI sendraw deployment step with a malicious payload and send commands to that nodes' BMC. IPMI sendraw capability is exposed multiple ways, including via VendorPassthru interfaces restricted to system admin and...

KB5094141: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: June 9, 2026

None None...

KB5088064: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: May 12, 2026

None None...

April 19, 2026—KB5091157 (OS Build 26100.32698) Out-of-band

None None...

April 19, 2026—KB5091571 (OS Build 25398.2276) Out-of-band

None None...

KB5082089: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: April 14, 2026

None None...

KB5079233: Servicing stack update for Windows Server 2012 R2: March 10, 2026

None None...

KB5079234: Servicing stack update for Windows Server 2012: March 10, 2026

None None...

KB5075902: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: February 10, 2026

None None...

January 24, 2026—KB5078135 (OS Build 26100.32236) Out-of-band

None None...

January 24, 2026—KB5078136 (OS Build 20348.4651) Out-of-band

None None...

January 24, 2026—KB5078133 (OS Build 25398.2097) Out-of-band

None None...

CVE-2026-21973

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Security Management System. Supported versions that are affected are 14.5.0.15.0, 14.7.0.8.0 and 14.8.0.1.0. Easily exploitable vulnerability allows low privileged attacker with...

EUVD-2026-3539

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Security Management System. Supported versions that are affected are 14.5.0.15.0, 14.7.0.8.0 and 14.8.0.1.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2026-21973

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Security Management System. Supported versions that are affected are 14.5.0.15.0, 14.7.0.8.0 and 14.8.0.1.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2026-21973

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Security Management System. Supported versions that are affected are 14.5.0.15.0, 14.7.0.8.0 and 14.8.0.1.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2026-21973

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Security Management System. Supported versions that are affected are 14.5.0.15.0, 14.7.0.8.0 and 14.8.0.1.0. Easily exploitable vulnerability allows low privileged attacker with...

Oracle Financial Services Applications security vulnerabilities

Oracle Financial Services Applications is a set of financial services software developed by Oracle Corporation in the United States. This product includes core banking, online banking, and property management functions. FLEXCUBE Investor Servicing is a comprehensive solution component that provid...