CVE-2026-61258

Affected : Oracle Internet Directory OID LDAP Server component in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0. Cause : unspecified; classified as "easily exploitable." Impact : unauthenticated network attacker via LDAP can fully compromise the directory (C:H/I:H/A:H, CVSS 9.8 Crit...

CVE-2026-61265

...

CVE-2026-61212

CVE-2026-61212 is a vulnerability in the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of Oracle WebCenter...

CVE-2026-61213

Oracle WebCenter Portal Runtime Tools in versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based, low-complexity attack requiring only low privileges, enabling full system compromise (CVSS 8.8). No exploitation details are provided in the documents; Oracle's August 2026 CPU advisory i...

CVE-2026-61029

Oracle WebCenter Sites (component: WebCenter Sites) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based attack. An unauthenticated remote attacker can compromise the application, potentially impacting additional products (scope change), with CVSS 9.0 critical ...

CVE-2026-60976

...

CVE-2026-60921

...

CVE-2026-60853

CVE-2026-60853 affects Helidon (Oracle Fusion Middleware), specifically the Imperative Web Server component, in supported version 3.2.20 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). ...

CVE-2026-60797

...

CVE-2026-60728

...

CVE-2026-60715

CVE-2026-60715 affects Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 in the OIM Legacy UI component. A low-privileged attacker with network HTTP access can exploit it (CVSS 8.8, HIGH) to fully compromise the application. No in-the-wild exploitation or exploit code is reported. Oracle...

CVE-2026-60679

A HIGH-severity flaw (CVSS 7.5) in Oracle WebLogic Server Core allows a low-privileged remote attacker to fully take over the server via T3/IIOP protocols. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. No exploit code or in-the-wild exploitation is documented. Patch details a...

CVE-2026-60412

...

CVE-2026-60391

An unauthenticated, network-accessible attacker can exploit Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) via HTTP to gain unauthorized access to critical data, with no user interaction required (CVSS 7.5, HIGH). No exploitation or patch details are provided in the documents.

CVE-2026-75874

creationtimestamp| type| source ---|---|--- 2026-08-18 20:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf2nh52c42m 2026-08-19 04:47:19+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 02:37:07+00:00| see...

CVE-2026-74990

creationtimestamp| type| source ---|---|--- 2026-08-18 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf23mac2525 2026-08-19 03:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfrkkkdx72j 2026-08-19 04:47:16+00:00| seen|...

CVE-2026-50774

creationtimestamp| type| source ---|---|--- 2026-08-18 20:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf23kqd2z2c...

CGA-JRMR-PVJW-RMXV

Bulletin has no description...

CGA-HQF4-H7M5-8G92

Bulletin has no description...

MINI-8W8M-WH35-FFGQ

Bulletin has no description...