CVE-2026-82995

CVE-2026-82995 affects the Oracle Platform Security for Java product (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Supported versions 12.2.1.4.0 and 14.1.2.0.0 are vulnerable. The flaw allows an unauthenticated attacker with network access via SOAP to comprom...

CVE-2026-82994

CVE-2026-82994 is a critical vulnerability (CVSS 3.1: 9.8 ) in Oracle Platform Security for Java (component: Centralized Thirdparty Jars ) within Oracle Fusion Middleware. Supported versions 12.2.1.4.0 and 14.1.2.0.0 are affected. An unauthenticated attacker with network access via LDAP can explo...

EUVD-2026-79317

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73958

Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by a vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as diffi...

EUVD-2026-79314

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Ren Server. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

EUVD-2026-79312

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79310

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2026-73954

CVE-2026-73954 is a vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools , affecting supported versions 8.61–8.63 . An unauthenticated attacker with network access via HTTP can exploit this flaw, though the attack complexity is rated high (difficult to exp...

EUVD-2026-79307

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79304

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73951

Oracle WebCenter Portal (component: Portlet Services ) is affected by a vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . The flaw allows an unauthenticated attacker with network access via HTTP to achieve takeover of the portal, with high impact to confidentiality, integrity, and a...

CVE-2026-73950

Oracle Access Manager (part of Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by an easily exploitable vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achiev...

CVE-2026-73947

CVE-2026-73947 is a critical vulnerability in the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit it with low complexity to achieve full takeove...

EUVD-2026-79301

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79520

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-70757

CVE-2026-70757 is a critical vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware, component: Core) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 . An unauthenticated attacker with network access via T3 or IIOP can compromise the server, resulting in full take...

CVE-2026-70756

CVE-2026-70756 is a critical vulnerability in the Core component of Oracle WebLogic Server (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via T3 or IIOP can exploit this vulnerability to ...

EUVD-2026-79506

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

EUVD-2026-79233

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

EUVD-2026-79226

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...