33299 matches found
CVE-2026-71106
Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet ) is affected by a vulnerability in versions 5.6.28.0–5.6.28.1 . An unauthenticated attacker with network access via HTTP can achieve full system takeover (complete compromise of confidentiality, integrity, and availability). ...
CVE-2026-71104
...
CVE-2026-71099
Oracle Business Intelligence Enterprise Edition 26.01.0.0.0 (Analytics Web Answers component) has an easily exploitable vulnerability allowing a high-privileged network attacker via HTTP to fully compromise the application (CVSS 7.2, HIGH). Patch details are in Oracle's August 2026 CPU advisory; ...
CVE-2026-71100
CVE-2026-71100 affects Oracle Database Server's RDBMS component across versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with network access via Oracle Net can exploit it to read a subset of database data. CVSS 3.1 score is 5.3 (MEDIUM). Oracle's August 2026 CPU adv...
CVE-2026-71097
...
CVE-2026-71090
Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component vulnerability exploitable via HTTP by a low-privileged attacker, enabling DoS crashes, unauthorized data read, and limited update/delete access; CVSS 6.4 MEDIUM. No exploit details or patch version provided; monit...
CVE-2026-71089
Oracle Agile PLM MCAD Connector CAX Client version 3.6 is vulnerable: an unauthenticated attacker with local infrastructure access can exploit it (low complexity, human interaction required) to gain unauthorized read access to a subset of accessible data. CVSS 3.3 LOW; no exploitation observed. O...
CVE-2026-71087
CVE-2026-71087 affects the CAX Client component of Oracle Agile PLM MCAD Connector version 3.6 (Oracle Supply Chain). An unauthenticated attacker with network access via HTTP can exploit this with low complexity to gain unauthorized read access to a subset of the product's accessible data. The im...
CVE-2026-71079
Oracle MySQL Connector/ODBC 26.7.0 is affected by a network-accessible DoS vulnerability exploitable by low-privileged attackers, causing hangs or crashes with no confidentiality or integrity impact (CVSS 3.1:6.5, availability-only). No exploitation details provided; monitor Oracle's August 2026 ...
CVE-2026-71079
...
CVE-2026-71078
Oracle Agile PLM MCAD Connector (component: CAX Client, version 3.6) has a local privilege escalation vulnerability requiring low privileges, high attack complexity, and human interaction. Successful exploitation yields unauthorized read/write/delete access to a subset of data and partial DoS. CV...
CVE-2026-71078
...
CVE-2026-71075
Affected product is Oracle Agile PLM MCAD Connector (CAX Client) version 3.6. Attack requires physical network-segment access and is rated MEDIUM (CVSS 5.9). Impact: unauthorized data access and limited data modification. Oracle's August 2026 CPU patch is referenced; no exploit code or in-the-wil...
CVE-2026-71076
...
CVE-2026-71069
...
CVE-2026-71067
Affected: Oracle Agile PLM MCAD Connector v3.6 (CAX Client component). Root cause: Not specified in the documents. Impact: CVSS 8.8 (High) — a low-privileged, network-reachable attacker via HTTP can achieve full compromise (confidentiality, integrity, availability) and takeover of the connector. ...
CVE-2026-71064
...
CVE-2026-71050
...