CVE-2026-73866

Oracle Helidon 4.5.0's Imperative Web Server component contains a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated network attacker via HTTP, granting unauthorized creation, deletion, and modification of all Helidon-accessible data. No patch version, exploit details, or in-the-...

CVE-2026-71165

Oracle Helidon 3.2.18's Imperative Web Server component is vulnerable to a CVSS 5.4 medium-severity flaw: an authenticated low-privilege network attacker can exploit it via HTTP to gain unauthorized read and write access to Helidon data. No exploit code or in-the-wild exploitation details are pro...

CVE-2026-71165

...

CVE-2026-71166

...

CVE-2026-71152

...

CVE-2026-71154

...

CVE-2026-71151

...

CVE-2026-71149

...

CVE-2026-71146

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has a local DoS flaw (CVSS 1.9 LOW); high-privilege local attacker can cause partial service disruption. No exploitation observed; patch details not provided in documents.

CVE-2026-71144

Oracle Hyperion Financial Management version 11.2.25.0.000 has a local Security component vulnerability exploitable only by a high-privileged attacker with infrastructure logon access. Successful exploitation allows unauthorized read and limited update/insert/delete access to accessible data; ava...

CVE-2026-71137

Oracle VM VirtualBox Core component in version 7.2.14 is affected by an easily exploitable vulnerability (CVSS 6.0) that allows a high-privileged local attacker to cause a hang or crash (availability impact). Exploitation details are not provided in the documents. No patch version or workaround i...

CVE-2026-71137

...

CVE-2026-71135

...

CVE-2026-71130

...

CVE-2026-71132

Oracle VM VirtualBox 7.2.14 (component: Core) is affected by a local, high-complexity vulnerability requiring high privileges, with scope-change effects that can expose all VirtualBox-accessible data. CVSS 3.1 scores it MEDIUM (5.3), confidentiality-only impact. Oracle published security advisory...

CVE-2026-71128

...

CVE-2026-71126

Oracle VM VirtualBox Core component in version 7.2.14 is affected by a HIGH-severity local vulnerability (CVSS 7.8). A low-privileged attacker with infrastructure access can exploit it to compromise the product, with scope change potentially impacting additional products. Oracle's August 2026 sec...

CVE-2026-71125

...

CVE-2026-71120

...

CVE-2026-71123

Oracle Hyperion Financial Management 11.2.25.0.000 has an unauthenticated HTTP-accessible vulnerability in its Security component, allowing low-complexity attacks requiring user interaction to gain unauthorized read/write access to data (CVSS 5.4, MEDIUM). Oracle's August 2026 CPU advisory is the...