Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised...

Oracle E-Business Suite (October 2026 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are...

EUVD-2026-106725

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-106727

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Bidder Registration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-106723

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-106240

Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite component: Installation of SNO. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Strategic...

CVE-2026-91482

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Bidder Registration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-91478

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-91480

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-101842

Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite component: Installation of SNO. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Strategic...

CVE-2026-91480

A vulnerability exists in the Strategic Sourcing component of Oracle PeopleSoft Enterprise SCM (version 9.2 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product. Successful exploitation may lead to unauthorized access to critical data or compl...

CVE-2026-91482

The PeopleSoft Enterprise SCM Strategic Sourcing product (version 9.2 ) is vulnerable in the Bidder Registration component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may result in unauthorized access to ...

CVE-2026-91478

Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 is vulnerable to a high-severity security flaw. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Strategic Sourcing component, potentially leading to a full takeover of the produ...

CVE-2026-101842

A vulnerability exists in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO) affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can compromise the product, potentially leading to a takeover , provided th...

Oracle Strategic Network Optimization security vulnerability

A security vulnerability exists in Oracle Strategic Network Optimization versions 12.2.3 through 12.2.15. This vulnerability stems from issues related to the Installation of the SNO component, potentially allowing unauthenticated attackers to gain HTTP access and take control of Strategic Network...

Oracle E-Business Suite: CVE-2026-101842: Critical Patch Update

Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite component: Installation of SNO. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Strategic...

PT-2026-120000

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 Description A flaw in the Strategic Sourcing component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to ...

PT-2026-120002

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 Description A flaw in the Strategic Sourcing component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-120004

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 Description An issue exists in the Bidder Registration component that allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitati...

PT-2026-119511

Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite component: Installation of SNO. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Strategic...