CVE-2026-83458

Oracle Helidon (part of Oracle Fusion Middleware), specifically the JSON component , is affected in supported versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to cause a partial denial of service (partial DOS) of Helidon....

EUVD-2026-79758

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-media-multipart. Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of th...

CVE-2026-83459

CVE-2026-83459 affects Helidon (Oracle Fusion Middleware), specifically the helidon-media-multipart component, in supported versions 3.0.0 through 3.2.20 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via HTTP , resulting in a partial denial of servic...

CVE-2026-83460

CVE-2026-83460 affects the LRA component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . The vulnerability is an easily exploitable flaw allowing an unauthenticated attacker with network access via HTTP to compromise the service. Successful exploitation can re...

EUVD-2026-79751

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-83452

A critical vulnerability (CVSS 9.8) affects the Oracle Document Management and Collaboration component of Oracle E-Business Suite , specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit t...

EUVD-2026-79746

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET parameter without any capability check or...

EUVD-2026-79724

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Oracle JDeveloper. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDevelope...

CVE-2026-83424

Oracle JDeveloper (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized access to critical data or c...

CVE-2026-83422

A vulnerability in Oracle Identity Manager (component: OIM Legacy UI ) within Oracle Fusion Middleware affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . The flaw allows an unauthenticated attacker with network access via HTTP to compromise the product, though successful exploitation requires...

EUVD-2026-79718

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...

CVE-2026-83417

A vulnerability in the Oracle Communications Cloud Native Core – Security Edge Protection Proxy (SEPP) component, affecting versions 26.1.200 and 25.2.201 , allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the SEPP. Successful exploitatio...

EUVD-2026-79708

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83355

Oracle Enterprise Manager for Fusion Middleware (component: Metrics ) in supported versions 13.5 and 24.1 contains a critical vulnerability that allows an unauthenticated attacker with network access via HTTP to fully compromise the product, resulting in takeover with high impact to confidentiali...

CVE-2026-83351

CVE-2026-83351 affects the RDBMS component of Oracle Database Server , versions 23.4.0 through 23.26.3 . An unauthenticated attacker with network access via Oracle Net can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). Successful exploitation can ...

EUVD-2026-79704

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result i...

CVE-2026-83349

CVE-2026-83349 affects the Oracle Net Services component of Oracle Database Server in supported versions 19.3–19.32 , 21.3–21.23 , and 23.4.0–23.26.3 . An unauthenticated attacker with network access via Oracle Net can trigger a hang or frequently repeatable crash , resulting in a complete denial...

EUVD-2026-79700

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle Net Services. Successful attacks require human...

CVE-2026-83350

CVE-2026-83350 affects the Oracle Net Services component of Oracle Database Server , specifically versions 21.3–21.23 and 23.4.0–23.26.3 . An unauthenticated attacker with network access via Oracle Net can trigger a hang or frequently repeatable crash , resulting in a complete denial of service o...

EUVD-2026-79702

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services...