CVE-2026-70908

CVE-2026-70908 affects the Imperative Web Server component of Helidon (Oracle Fusion Middleware), specifically version 3.2.18 . An unauthenticated attacker with network access via HTTP can trigger a complete denial of service , causing a hang or frequently repeatable crash of the Helidon service....

CVE-2026-70905

...

CVE-2026-70903

...

CVE-2026-70902

Oracle Hyperion Data Relationship Management v11.2.25.0.000 has a HIGH-severity flaw (CVSS 7.1) in its Access and security component. A low-privileged local attacker can gain unauthorized creation, deletion, and modification access to all accessible data, with high confidentiality and integrity i...

CVE-2026-70891

...

CVE-2026-70892

Affected product: Oracle Hyperion Data Relationship Management version 11.2.25.0.000, component "Access and security." Root cause: unspecified, described as "difficult to exploit." Impact: CVSS 8.2 (High) — low-privileged network attacker can gain unauthorized read/write access to critical data w...

CVE-2026-70890

Oracle Hyperion DRM 11.2.25.0.000 has an unauthenticated, easily exploitable HTTP access-and-security flaw (CVSS 7.5) allowing full confidentiality compromise; Oracle's August 2026 CPU advisory is referenced, but no patch or exploit details are provided in the documents.

CVE-2026-70885

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.5) access and security flaw exploitable via HTTP by a low-privileged attacker, potentially causing product takeover and scope change. No exploit or patch details are provided; monitor Oracle's August 2026 CPU f...

CVE-2026-70887

...

CVE-2026-70884

...

CVE-2026-70882

...

CVE-2026-70883

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has a critical (CVSS 9.1) flaw in its Access and security component. An unauthenticated remote attacker over HTTP can gain unauthorized read/write access to all application data. Exploitation details are not provided; apply the Or...

CVE-2026-70880

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a critical flaw in its Access and security component. Unauthenticated attackers with network TCP access can fully compromise the application (CVSS 10.0), with potential scope change affecting additional products. Oracle's August 2026 ...

CVE-2026-70881

...

CVE-2026-70880

...

CVE-2026-70877

A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...

CVE-2026-70873

...

CVE-2026-70874

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an easily exploitable flaw in its Access and security component. A low-privileged attacker with network HTTP access can achieve full compromise (confidentiality, integrity, availability). Oracle's August 2026 CPU provides the ...

CVE-2026-70872

Oracle Hyperion Data Relationship Management (component: Access and security), version 11.2.25.0.000, is affected by an unauthenticated, network-reachable flaw (CVSS 9.1) enabling full confidentiality and integrity compromise of accessible data; no public exploit details are available. Patch guid...

CVE-2026-70872

...