EUVD-2026-79686

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful attacks of this...

CVE-2026-83334

Oracle Web Services Manager (Oracle Fusion Middleware), component Web Services Security , versions 12.2.1.4.0 and 14.1.2.0.0 are affected by a difficult-to-exploit vulnerability allowing an unauthenticated attacker with network access via SOAP to gain unauthorized access to all accessible data an...

CVE-2026-83333

CVE-2026-83333 affects the Oracle Net Services component of Oracle Database Server versions 23.4.0 through 23.26.3 . An unauthenticated attacker with network access via Oracle Net can trigger a hang or frequently repeatable crash, resulting in a complete denial of service of Oracle Net Services. ...

EUVD-2026-79687

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise...

EUVD-2026-79683

Vulnerability in the Helidon product of Oracle Fusion Middleware component: WebSocket. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerabilit...

CVE-2026-83330

CVE-2026-83330 is a Denial of Service vulnerability in the WebSocket component of Helidon (Oracle Fusion Middleware), affecting versions 4.0.0 through 4.5.4 . An unauthenticated remote attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of the affe...

CVE-2026-83326

Oracle Siebel CRM Integration (component: Open Integration ) is affected by an easily exploitable vulnerability in supported versions 25.12 through 26.7 . An unauthenticated attacker with network access via HTTP can compromise the component, resulting in unauthorized access to critical data or co...

CVE-2026-83327

CVE-2026-83327 is a critical vulnerability in the Personalization component of Oracle Applications Framework within Oracle E-Business Suite , affecting versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via SOAP can exploit it to achieve full takeover of the framewo...

EUVD-2026-79680

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Application...

EUVD-2026-79679

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: Open Integration. Supported versions that are affected are 25.12-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful...

CVE-2026-89040

Tencent Mass Service Engine in Cluster (MSEC) is affected by a path traversal vulnerability that allows a remote, unauthenticated attacker to send a crafted POST request containing ../, gaining root access on the target device. An attacker who uploads a webshell can then execute arbitrary code as...

EUVD-2026-79672

Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...

EUVD-2026-79656

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web General. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access...

CVE-2026-83305

Oracle BI Publisher (component: BI Platform Security ) in Oracle Analytics is vulnerable to an easily exploitable flaw allowing an unauthenticated attacker with network access via HTTP to compromise the product. Affected supported versions are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . Successful...

EUVD-2026-79657

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2026-83304

Oracle Business Intelligence Enterprise Edition (component: Analytics Web General ) in Oracle Analytics is vulnerable via unauthenticated network access over HTTP. Affected supported versions are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . The vulnerability is rated HIGH (CVSS 3.1: 8.9 , vector AV...

EUVD-2026-79651

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web General. The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-83299

Oracle Business Intelligence Enterprise Edition (Oracle Analytics), component Analytics Web General , version 12.2.1.4.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product, resulting in full takeover (...

EUVD-2026-79646

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...