CVE-2026-71118

Oracle Hyperion Financial Management (component: Security , version 11.2.25.0.000 ) is affected by a vulnerability exploitable by an unauthenticated attacker over the network via HTTP . The attack complexity is rated high , making exploitation difficult. Successful exploitation allows an attacker...

CVE-2026-71119

Oracle HFM Security component in version 11.2.25.0.000 is affected by a local vulnerability exploitable only by a high-privileged attacker with infrastructure access, potentially resulting in full application takeover (CVSS 6.4). No exploit details are provided; Oracle's August 2026 security advi...

CVE-2026-71116

Oracle VM VirtualBox 7.2.14 Core component has a HIGH-severity local vulnerability (CVSS 7.5) exploitable by a high-privilege attacker logged into the host, potentially compromising the hypervisor and additional products (scope change). No fix version is specified in the provided documents. Monit...

CVE-2026-71117

Oracle Hyperion Financial Management version 11.2.25.0.000 contains a Security-component flaw (CVSS 7.5, HIGH) exploitable by a high-privileged local attacker to fully compromise the application and potentially other products. Oracle's August 2026 CPU advisory is the remediation reference. No exp...

CVE-2026-71111

The Installer component of Oracle Identity Manager (versions 12.2.1.4.0 and 14.1.2.1.0) is vulnerable to a local privilege escalation (CVSS 7.8, HIGH) allowing a low-privileged attacker with host access to take over the product. No exploitation details are provided; apply the Oracle August 2026 C...

CVE-2026-71109

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has an easily exploitable local vulnerability allowing high-privileged attackers with infrastructure access to fully compromise the product (CVSS 6.7). No exploitation details are provided. Patch status is not specified in the ...

CVE-2026-71106

Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet ) is affected by a vulnerability in versions 5.6.28.0–5.6.28.1 . An unauthenticated attacker with network access via HTTP can achieve full system takeover (complete compromise of confidentiality, integrity, and availability). ...

CVE-2026-71104

...

CVE-2026-71099

Oracle Business Intelligence Enterprise Edition 26.01.0.0.0 (Analytics Web Answers component) has an easily exploitable vulnerability allowing a high-privileged network attacker via HTTP to fully compromise the application (CVSS 7.2, HIGH). Patch details are in Oracle's August 2026 CPU advisory; ...

CVE-2026-71100

CVE-2026-71100 affects Oracle Database Server's RDBMS component across versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with network access via Oracle Net can exploit it to read a subset of database data. CVSS 3.1 score is 5.3 (MEDIUM). Oracle's August 2026 CPU adv...

CVE-2026-71097

...

CVE-2026-71090

Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component vulnerability exploitable via HTTP by a low-privileged attacker, enabling DoS crashes, unauthorized data read, and limited update/delete access; CVSS 6.4 MEDIUM. No exploit details or patch version provided; monit...

CVE-2026-71089

Oracle Agile PLM MCAD Connector CAX Client version 3.6 is vulnerable: an unauthenticated attacker with local infrastructure access can exploit it (low complexity, human interaction required) to gain unauthorized read access to a subset of accessible data. CVSS 3.3 LOW; no exploitation observed. O...

CVE-2026-71087

CVE-2026-71087 affects the CAX Client component of Oracle Agile PLM MCAD Connector version 3.6 (Oracle Supply Chain). An unauthenticated attacker with network access via HTTP can exploit this with low complexity to gain unauthorized read access to a subset of the product's accessible data. The im...

CVE-2026-71079

Oracle MySQL Connector/ODBC 26.7.0 is affected by a network-accessible DoS vulnerability exploitable by low-privileged attackers, causing hangs or crashes with no confidentiality or integrity impact (CVSS 3.1:6.5, availability-only). No exploitation details provided; monitor Oracle's August 2026 ...

CVE-2026-71079

...

CVE-2026-71078

Oracle Agile PLM MCAD Connector (component: CAX Client, version 3.6) has a local privilege escalation vulnerability requiring low privileges, high attack complexity, and human interaction. Successful exploitation yields unauthorized read/write/delete access to a subset of data and partial DoS. CV...

CVE-2026-71078

...

CVE-2026-71076

...

CVE-2026-71075

Affected product is Oracle Agile PLM MCAD Connector (CAX Client) version 3.6. Attack requires physical network-segment access and is rated MEDIUM (CVSS 5.9). Impact: unauthorized data access and limited data modification. Oracle's August 2026 CPU patch is referenced; no exploit code or in-the-wil...