CVE-2026-70926

...

CVE-2026-70923

...

CVE-2026-70925

Oracle Hyperion Financial Management (component: Security ), version 11.2.25.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via SQL to compromise the product. Successful exploitation results in unauthorized creation, deletion, ...

CVE-2026-70923

The Imperative Web Server component of Oracle Helidon 3.2.19 is vulnerable to an unauthenticated, network-reachable attack requiring human interaction, enabling unauthorized read, insert, update, and delete access to Helidon data (CVSS 6.1). No root cause or patch details are provided in the docu...

CVE-2026-70920

Oracle Hyperion Financial Management 11.2.25.0.000 has a critical SQL-based Security component flaw (CVSS 9.9) exploitable by low-privileged network attackers, enabling full product takeover with scope impact to other systems. Oracle published advisory CSPAug2026. No exploit code or in-the-wild e...

CVE-2026-70919

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw requiring local infrastructure access, high complexity, and human interaction; successful exploitation grants unauthorized update/insert/delete access to application data. No exploit details provided. Patch status no...

CVE-2026-70917

...

CVE-2026-70914

Oracle Hyperion Financial Management version 11.2.25.0.000 has a HIGH-severity (CVSS 7.0) vulnerability in its Security component. An unauthenticated attacker with infrastructure access can compromise the application, requiring human interaction, leading to full confidentiality, integrity, and av...

CVE-2026-70916

...

CVE-2026-70911

...

CVE-2026-70910

Oracle Siebel CRM REST component (versions 17.0–26.6) is vulnerable to unauthenticated, network-accessible exploitation via HTTP, yielding unauthorized access to all Siebel CRM Integration data. CVSS 7.5 HIGH (confidentiality-only). Oracle's August 2026 CPU advisory is the primary reference. No e...

CVE-2026-70906

CVE-2026-70906 is a denial-of-service vulnerability in the 2D component of Oracle Java SE , affecting versions 25.0.4 and 26.0.2 . The underlying issue relates to font loading , as indicated by the associated OpenJDK security advisory (RLSA-2026:55798). An unauthenticated attacker with network ac...

CVE-2026-70908

CVE-2026-70908 affects the Imperative Web Server component of Helidon (Oracle Fusion Middleware), specifically version 3.2.18 . An unauthenticated attacker with network access via HTTP can trigger a complete denial of service , causing a hang or frequently repeatable crash of the Helidon service....

CVE-2026-70905

...

CVE-2026-70903

...

CVE-2026-70902

Oracle Hyperion Data Relationship Management v11.2.25.0.000 has a HIGH-severity flaw (CVSS 7.1) in its Access and security component. A low-privileged local attacker can gain unauthorized creation, deletion, and modification access to all accessible data, with high confidentiality and integrity i...

CVE-2026-70891

...

CVE-2026-70892

Affected product: Oracle Hyperion Data Relationship Management version 11.2.25.0.000, component "Access and security." Root cause: unspecified, described as "difficult to exploit." Impact: CVSS 8.2 (High) — low-privileged network attacker can gain unauthorized read/write access to critical data w...

CVE-2026-70890

Oracle Hyperion DRM 11.2.25.0.000 has an unauthenticated, easily exploitable HTTP access-and-security flaw (CVSS 7.5) allowing full confidentiality compromise; Oracle's August 2026 CPU advisory is referenced, but no patch or exploit details are provided in the documents.

CVE-2026-70885

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.5) access and security flaw exploitable via HTTP by a low-privileged attacker, potentially causing product takeover and scope change. No exploit or patch details are provided; monitor Oracle's August 2026 CPU f...