CVE-2026-21954

Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications component: Xstore Mobile. The supported version that is affected is 21.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail...

GHSA-V73X-HX65-6PF4 Gitea: Unauthorized Access to Labels of Private Organizations

Summary Gitea 1.26.2 does not properly enforce organization visibility restrictions on organization label read endpoints. A user without access to a private organization can retrieve labels belonging to that organization through the Organization Labels API. As a result, label metadata intended to...

CVE-2026-62563

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process...

CVE-2026-62482

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public...

CVE-2026-61081

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Performance Schema. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high...

CVE-2026-47043

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

EUVD-2026-41606

Gitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories...

PT-2026-62570

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 14.1.2.0.0 Oracle WebLogic Server version 15.1.1.0.0 Description A flaw in the Console component of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to compromise the server...

PT-2026-62949

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Secure Enterprise Search versions 12.2.3 through 12.2.15 Description A flaw in the Search Integration Engine component allows a low privileged attacker with network access via HTTP to compromise the system. This can lea...

CVE-2026-61303: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle EDI Gateway executes...

PT-2026-62129

Name of the Vulnerable Software and Affected Versions Oracle Retail Xstore Point of Service version 21.0.3 Description A flaw in the Xstore Mobile component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to...

CVE-2026-61071: Improper Access Control

Vulnerability in the PeopleSoft Enterprise FIN Engineering Argentina product of Oracle PeopleSoft component: Engineering. The supported version that is affected is 9.1. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2026-62942

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Concurrent Processing versions 12.2.3 through 12.2.15 Description A flaw in the BI Publisher Integration component of Oracle Concurrent Processing allows a low privileged attacker with network access via HTTP to...

CVE-2026-60353: Improper Access Control

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDeveloper...

CVE-2026-62489: Improper Access Control

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contrac...

PT-2026-63122

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Servers. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Inbound...

PT-2026-62161

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

PT-2026-62630

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Asset Management versions 12.2.3 through 12.2.15 Description An issue in the Work Definition component allows a low privileged attacker with network access via HTTPS to compromise the system. This can lead to unauthorized rea...

CVE-2026-60237: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence...

CVE-2026-47016: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: Event Publish and Subscribe. Supported versions that are affected are 17.0-26.4. Difficult to exploit vulnerability allows physical access to compromise Siebel CRM Integration. While the vulnerability is in Siebel...