CVE-2026-70937

...

CVE-2026-70938

...

CVE-2026-70936

...

CVE-2026-70937

A HIGH-severity flaw in Oracle Hyperion Financial Management 11.2.25.0.000 Security component allows a low-privileged, network-authenticated attacker via HTTP to achieve full product compromise (confidentiality, integrity, availability). No exploitation evidence is provided; Oracle's August 2026 ...

CVE-2026-70931

...

CVE-2026-70929

...

CVE-2026-70928

The Security component of Oracle Hyperion Financial Management (version 11.2.25.0.000) is vulnerable to SQL-based attacks by low-privileged network attackers, enabling full system compromise (CVSS 8.8, HIGH). No exploitation details are provided. Patch status is not specified in the available doc...

CVE-2026-70926

...

CVE-2026-70925

Oracle Hyperion Financial Management (component: Security ), version 11.2.25.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via SQL to compromise the product. Successful exploitation results in unauthorized creation, deletion, ...

CVE-2026-70923

...

CVE-2026-70923

The Imperative Web Server component of Oracle Helidon 3.2.19 is vulnerable to an unauthenticated, network-reachable attack requiring human interaction, enabling unauthorized read, insert, update, and delete access to Helidon data (CVSS 6.1). No root cause or patch details are provided in the docu...

CVE-2026-70920

Oracle Hyperion Financial Management 11.2.25.0.000 has a critical SQL-based Security component flaw (CVSS 9.9) exploitable by low-privileged network attackers, enabling full product takeover with scope impact to other systems. Oracle published advisory CSPAug2026. No exploit code or in-the-wild e...

CVE-2026-70919

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw requiring local infrastructure access, high complexity, and human interaction; successful exploitation grants unauthorized update/insert/delete access to application data. No exploit details provided. Patch status no...

CVE-2026-70917

...

CVE-2026-70914

Oracle Hyperion Financial Management version 11.2.25.0.000 has a HIGH-severity (CVSS 7.0) vulnerability in its Security component. An unauthenticated attacker with infrastructure access can compromise the application, requiring human interaction, leading to full confidentiality, integrity, and av...

CVE-2026-70916

...

CVE-2026-70911

...

CVE-2026-70910

Oracle Siebel CRM REST component (versions 17.0–26.6) is vulnerable to unauthenticated, network-accessible exploitation via HTTP, yielding unauthorized access to all Siebel CRM Integration data. CVSS 7.5 HIGH (confidentiality-only). Oracle's August 2026 CPU advisory is the primary reference. No e...

CVE-2026-70906

CVE-2026-70906 is a denial-of-service vulnerability in the 2D component of Oracle Java SE , affecting versions 25.0.4 and 26.0.2 . The underlying issue relates to font loading , as indicated by the associated OpenJDK security advisory (RLSA-2026:55798). An unauthenticated attacker with network ac...

CVE-2026-70908

CVE-2026-70908 affects the Imperative Web Server component of Helidon (Oracle Fusion Middleware), specifically version 3.2.18 . An unauthenticated attacker with network access via HTTP can trigger a complete denial of service , causing a hang or frequently repeatable crash of the Helidon service....