CVE-2026-70708

The Security API component of Oracle E-Business Suite Sales Foundation (versions 12.2.3–12.2.15) has a HIGH severity (CVSS 8.1) flaw allowing low-privileged, unauthenticated network attackers to create, delete, or modify critical data and gain full data access. No exploitation evidence is provide...

CVE-2026-70703

...

CVE-2026-75877

creationtimestamp| type| source ---|---|--- 2026-08-18 21:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf4eurikp22 2026-08-20 03:00:03+00:00| published-proof-of-concept| Telegram/TXByhyAHALLjU76evu5RVvsn4zpzLoBf6fuRONOvcY2o 2026-08-21 00:00:11+00:00|...

CVE-2026-62592

...

CVE-2026-62569

...

CVE-2026-62501

...

CVE-2026-62471

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw in its Common Events component. An unauthenticated remote attacker can exploit it via HTTP to fully compromise the application (confidentiality, integrity, availability). No exploitation details or patch v...

CVE-2026-62450

...

CVE-2026-61258

Affected : Oracle Internet Directory OID LDAP Server component in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0. Cause : unspecified; classified as "easily exploitable." Impact : unauthenticated network attacker via LDAP can fully compromise the directory (C:H/I:H/A:H, CVSS 9.8 Crit...

CVE-2026-61265

...

CVE-2026-61212

CVE-2026-61212 is a vulnerability in the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of Oracle WebCenter...

CVE-2026-61213

Oracle WebCenter Portal Runtime Tools in versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based, low-complexity attack requiring only low privileges, enabling full system compromise (CVSS 8.8). No exploitation details are provided in the documents; Oracle's August 2026 CPU advisory i...

CVE-2026-61029

Oracle WebCenter Sites (component: WebCenter Sites) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based attack. An unauthenticated remote attacker can compromise the application, potentially impacting additional products (scope change), with CVSS 9.0 critical ...

CVE-2026-60976

...

CVE-2026-60921

...

CVE-2026-60853

CVE-2026-60853 affects Helidon (Oracle Fusion Middleware), specifically the Imperative Web Server component, in supported version 3.2.20 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). ...

CVE-2026-60797

...

CVE-2026-60728

...

CVE-2026-60715

CVE-2026-60715 affects Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 in the OIM Legacy UI component. A low-privileged attacker with network HTTP access can exploit it (CVSS 8.8, HIGH) to fully compromise the application. No in-the-wild exploitation or exploit code is reported. Oracle...

CVE-2026-60679

A HIGH-severity flaw (CVSS 7.5) in Oracle WebLogic Server Core allows a low-privileged remote attacker to fully take over the server via T3/IIOP protocols. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. No exploit code or in-the-wild exploitation is documented. Patch details a...