32991 matches found
CVE-2026-75877
creationtimestamp| type| source ---|---|--- 2026-08-18 21:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf4eurikp22 2026-08-20 03:00:03+00:00| published-proof-of-concept| Telegram/TXByhyAHALLjU76evu5RVvsn4zpzLoBf6fuRONOvcY2o 2026-08-21 00:00:11+00:00|...
CVE-2026-70697
...
CVE-2026-70691
...
CVE-2026-70688
...
CVE-2026-70690
CVE-2026-70690 is a vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite , specifically in the US Payroll - General component. Affected versions are 12.2.3 through 12.2.15 . The vulnerability is difficult to exploit and requires a high-privileged attacker with network access v...
CVE-2026-70690
...
CVE-2026-70685
Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...
CVE-2026-70678
...
CVE-2026-70678
Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...
CVE-2026-70679
...
CVE-2026-70675
Oracle Reports Developer 14.1.2.0.0 (Oracle Fusion Middleware, Security and Authentication component) is vulnerable to unauthenticated remote HTTP attacks leading to full system takeover. CVSS 3.1 scores 8.1 (HIGH). Oracle's August 2026 CPU patches this issue; NCSC recommends prioritizing the upd...
CVE-2026-70674
CVE-2026-70674 affects Oracle Reports Developer 14.1.2.0.0 (component: Security and Authentication). An unauthenticated attacker with access to the physical communication segment can fully compromise the product (CVSS 8.8 HIGH). No exploit details are provided; refer to Oracle's August 2026 CPU a...
CVE-2026-62638
Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.1 flaw: unauthenticated remote attackers via HTTP can modify/delete data and crash the service (complete DoS). No exploit details provided. Patch status is not specified in the documents. Monitor Ora...
CVE-2026-62636
Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) is vulnerable to an unauthenticated, remotely exploitable SOAP attack (CVSS 8.6) yielding unauthorized data access, modification, and partial DoS. Oracle's August 2026 Critical Patch Update addresses it; apply patches per...
CVE-2026-62637
...
CVE-2026-62633
...
CVE-2026-62626
Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) is vulnerable to an unauthenticated, network-accessible HTTP exploit allowing full system takeover (CVSS 9.8). Oracle's August 2026 CPU addresses this; no public exploit code is documented. Organizations running affecte...
CVE-2026-62625
CVE-2026-62625 affects Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) in Oracle Fusion Middleware. An unauthenticated attacker with network access via SOAP can exploit this vulnerability to gain complete access to all accessible data , perform unauthorized updates, ...