CVE-2026-83281

CVE-2026-83281 is a Denial-of-Service vulnerability in Oracle Fusion Middleware Helidon , specifically the helidon-webserver component, affecting versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash, resulting in a ...

EUVD-2026-79632

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-83276

CVE-2026-83276 affects the helidon-webclient-http2 component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP/2 can trigger a hang or frequently repeatable crash, resulting in a complete denial of service...

CVE-2026-82221-PoC

CVE-2026-82221 - XSS Reflejado No Autenticado en RegistrationMagic Resumen Este repositorio contiene una Prueba de Concepto PoC para CVE-2026-82221 , una vulnerabilidad de Cross-Site Scripting XSS Reflejado no autenticado descubierta en el plugin de WordPress RegistrationMagic. La vulnerabilidad...

CVE-2026-83278

Oracle Helidon (part of Oracle Fusion Middleware), specifically the helidon-integrations-neo4j component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . The vulnerability requires an unauthenticated attacker with access to the physical communication segment (adjacent network) and is rated...

EUVD-2026-79630

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-integrations-neo4j. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

EUVD-2026-79628

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-83269

CVE-2026-83269 affects the Oracle BI Publisher component of Oracle Analytics (specifically the BI Platform Security sub-component). Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. An unauthenticated attacker with network access via HTTP can exploit this vulnerability wit...

EUVD-2026-79621

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2026-83270

Oracle Business Intelligence Enterprise Edition (component: BI Platform Security ) is vulnerable to an unauthenticated network-based attack over HTTP with low complexity. Affected supported versions are 8.2.0.0.0 and 26.01.0.0.0 . Successful exploitation results in unauthorized access to critical...

EUVD-2026-79622

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-79618

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Resource Catalog Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83266

CVE-2026-83266 affects the Resource Catalog Services component of Oracle JDeveloper (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to all Oracle JDeveloper accessi...

CVE-2026-83265

CVE-2026-83265 affects the Web Services Agent component of Oracle Web Services Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP , making it easily reachable without prior authentic...

CVE-2026-83261

Oracle Product Lifecycle Analytics (component: Core), version 3.6.1 , is affected by an unauthenticated, network-accessible vulnerability exploitable via HTTP . The CVSS 3.1 score is 9.8 (Critical) with full impact on confidentiality, integrity, and availability, meaning a successful attack resul...

EUVD-2026-79613

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Core. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Product Lifecycle Analytics...

CVE-2026-83258

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component Forge , version 11.4.0 ) is vulnerable to an unauthenticated, network-based attack via HTTP that can result in full takeover of the product. The vulnerability is rated difficult to exploit due to high attack complexity,...

EUVD-2026-79608

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

CVE-2026-83256

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) is affected in supported version 11.4.0 . An unauthenticated attacker with network access via TCP can exploit this vulnerability, which is rated difficult to exploit (high attack complexity), to achieve takeove...

EUVD-2026-79610

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...