CVE-2026-83277

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

CVE-2026-83252

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83246

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83234

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-83239

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

CVE-2026-83150

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite...

CVE-2026-83148

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful...

CVE-2026-87282

CVE-2026-87282 affects the Core component of Oracle VM VirtualBox version 7.2.16 . The vulnerability allows a high-privileged local attacker to cause a complete denial of service (hang or frequent crash) of VirtualBox. Due to a scope change , the attack may significantly impact additional product...

EUVD-2026-79924

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-87272

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local privilege escalation vulnerability (CVE-2026-87272). A low-privileged attacker with logon access to the host can exploit this with low complexity and no user interaction to achieve full confidentiality, integrity, and availabil...

CVE-2026-87269

CVE-2026-87269 affects Oracle VM VirtualBox 7.2.16 (component: Core ), applying to Windows hosts only . An easily exploitable vulnerability allows a low-privileged local attacker with logon to the host to achieve full takeover of VirtualBox, impacting confidentiality, integrity, and availability ...

EUVD-2026-79902

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87216

CVE-2026-87216 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . The vulnerability is easily exploitable by a low-privileged attacker who has logon to the infrastructure where the product executes. Successful exploitation results in full takeover of th...

CVE-2026-87180

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in the Security component. A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of the system, with high ...

EUVD-2026-79721

Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft component: Engineering. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

EUVD-2026-79706

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle WebCenter...

CVE-2026-83257

CVE-2026-83257 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the affected product. The attack is rated difficult to ...

EUVD-2026-79605

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

CVE-2026-83255

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a vulnerability that allows an unauthenticated attacker with network access via TCP to achieve takeover of the product. The attack is rated as difficult to exploit (high complex...

CVE-2026-83238

CVE-2026-83238 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , requiring no user interaction. Successful exploitation can lead to un...