CVE-2026-60197

Oracle CVE-2026-60197 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The issue is described as easily exploitable: an unauthenticated attacker can gain network access via TCP to compromise Coherence, potent...

CVE-2026-60198

Oracle WebLogic Server (Core) in Oracle Fusion Middleware is affected by CVE-2026-60198 affecting 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via T3 or IIOP can take over the server. CVSS v3.1 base score 9.8 (C/H/I/A). The connected document...

CVE-2026-60196

CVE-2026-60196 — Oracle WebLogic Server : A vulnerability in Oracle Fusion Middleware (Core) affects WebLogic Server versions 12.2.1.4.0 and 14.1.2.0.0. The issue enables a high-privileged attacker with access to the physical/adjacent network segment to compromise WebLogic Server, with potential ...

CVE-2026-60193

CVE-2026-60193 – MySQL Connectors (Connector/Net) : A vulnerability in Oracle MySQL Connector/Net within MySQL Connectors affects versions 9.7.0–9.7.1. It allows a low-privilege, network-accessing attacker (across multiple protocols) to compromise MySQL Connectors, with potential impact on additi...

CVE-2026-60194

CVE-2026-60194 affects Oracle MySQL products: MySQL Server and MySQL Cluster, versions 9.7.0–9.7.1. The vulnerability resides in the Server: JSON Duality component. Exploitation requires network access with high privileges and can be triggered via multiple protocols, potentially causing a hang or...

CVE-2026-60195

CVE-2026-60195 affects Oracle MySQL products: MySQL Server (version 9.7.0–9.7.1) and MySQL Cluster (version 9.7.0–9.7.1) with a vulnerability in the Server: JSON Duality component. The issue can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang o...

CVE-2026-60191

The CVE-2026-60191 entry concerns Oracle MySQL Server and MySQL Cluster (Server: Replication). Affected versions include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is exploitable by a high-privilege user with local logon...

CVE-2026-60190

CVE-2026-60190 affects Oracle MySQL: Server (Replication) for MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1, and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The description states a difficult-to-exploit vulnerability that allows a high-privilege attacker with network access via multiple pr...

CVE-2026-60192

CVE-2026-60192 affects Oracle MySQL Connectors, Connector/Net, in MySQL Connectors versions 9.7.0–9.7.1. The vulnerability allows unauthenticated network-based access via multiple protocols to compromise MySQL Connectors, with Impacted components and CVSS v3.1 base score 8.1 (HIGH) across Confide...

CVE-2026-60189

CVE-2026-60189 affects Oracle MySQL Server (Server: Replication) and MySQL Cluster across multiple versions (Server 8.4.0–8.4.10, 9.7.0–9.7.1; Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1). It can be exploited with network access to compromise the affected MySQL components, with the impact des...

CVE-2026-60187

CVE-2026-60187 affects Oracle MySQL Server (Server: Replication) and MySQL Cluster. Affected: MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability allows a high-privilege attacker with network access (via multiple protocols) to cause ...

CVE-2026-60188

The CVE-2026-60188 entry affects Oracle MySQL components: MySQL Server (Replication) and MySQL Cluster. Affected versions are MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability can be exploited by a high-privilege attacker with ...

CVE-2026-60186

CVE-2026-60186 affects MySQL Server (versions 8.4.0–8.4.10, 9.7.0–9.7.1) and MySQL Cluster (8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1) with the Group Replication Plugin. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequent crashe...

CVE-2026-60185

CVE-2026-60185 affects Oracle MySQL: Server (Replication) and MySQL Cluster. Affected versions include MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability is difficult to exploit and, if leveraged by a high-privilege attacker with netwo...

CVE-2026-60182

The CVE-2026-60182 entry describes a vulnerability in Oracle MySQL: Server (Clone Plugin) affecting MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1, and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The issue, exploitable with network access via multiple protocols and requiring high privil...

CVE-2026-60183

Vulnerability CVE-2026-60183 affects Oracle MySQL: MySQL Server (Server: Clone Plugin) and MySQL Cluster. Affected are MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The issue is exploitable by a high-privilege attacker with local access to the i...

CVE-2026-60184

The CVE-2026-60184 entry concerns Oracle MySQL products (MySQL Server and MySQL Cluster) with a flaw in the Server: Replication component. Affected versions include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is exploitab...

CVE-2026-60181

This CVE affects Oracle MySQL products: MSSQL? No. Specifically, MySQL Server and MySQL Cluster (Server: Configurator) with affected versions MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability is described as difficult to exploit, requiring a user with local access and huma...

CVE-2026-60180

The CVE-2026-60180 issue affects Oracle MySQL Connector/C++ (MySQL Connectors product). Affected versions: 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a hang or crash (complete denial of service) of MySQL Connectors. CVSS 3...

CVE-2026-60179

The CVE-2026-60179 entry concerns Oracle MySQL’s Connector/C++ library. Affected product/version: MySQL Connectors (Connector/C++) 9.7.0–9.7.1. Root cause/details: the description notes a vulnerability that can be exploited by an unauthenticated attacker with network access via multiple protocols...

CVE-2026-60177

CVE-2026-60177 affects MySQL Server (versions 8.4.0–8.4.10; 9.7.0–9.7.1) and MySQL Cluster (8.0.0–8.0.47; 8.4.0–8.4.10; 9.7.0–9.7.1) via the Server: Clone Plugin. A high-privilege attacker with network access through multiple protocols can cause a hang or frequent crashes (DoS). CVSS v3.1 base sc...

CVE-2026-60178

CVE-2026-60178 affects Oracle MySQL: Server (Clone Plugin) and MySQL Cluster. Affected versions: MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is exploitable by a high-privilege attacker with network access via multiple protoc...

CVE-2026-60175

CVE-2026-60175 affects Oracle Database Server RDBMS: vulnerable versions are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An attacker with Authenticated User privilege and network access via Oracle Net can exploit this low-privilege access to compromise the RDBMS and achieve takeover. CVSS 3.1 bas...

CVE-2026-60174

Technical details for CVE-2026-60174 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE/NVD sources.

CVE-2026-60176

Oracle E-Business Suite Oracle Payments (component: File Transmission) on versions 12.2.3–12.2.15 is vulnerable to network-based exploitation by a low-privileged attacker via HTTP, potentially yielding unauthorized access to Oracle Payments data and partial denial of service. The CVSS v3.1 base s...

CVE-2026-60171

Vulnerability CVE-2026-60171 affects Oracle MySQL 8.0 MySQL Cluster (Server: Optimizer). Affected versions are 8.0.0–8.0.47. The issue allows a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (complete DOS) of MySQL Cluster. CVSS 3.1 base score...

CVE-2026-60172

CVE-2026-60172 affects Oracle Autonomous Health Framework (AHF) via the Developer triaging platform. Versions 26.0.0, 26.1.0, and 26.2.0 are affected. The vulnerability is locally exploitable and requires high privileges with user interaction; successful exploitation can lead to takeover of AHF a...

CVE-2026-60173

CVE-2026-60173 affects Oracle Analytics’ BI Publisher component (BI Platform Security). Affected supported versions are 8.2.0.0.0 and 12.2.1.4.0. The vulnerability is exploitable over HTTP by an unauthenticated network attacker and can lead to takeover of Oracle BI Publisher, with a CVSS v3.1 bas...

CVE-2026-60169

Oracle Hospitality Simphony (POS) is affected in versions 19.8-19.8.5, 19.9-19.9.3, and 19.10. An unauthenticated, network-accessible attacker via HTTP can compromise and take over the system. CVSS 3.1 base score 8.1 (C/H/I/A). No explicit remediation details in the provided CVE description; Orac...

CVE-2026-60168

The CVE-2026-60168 entry describes a vulnerability in Oracle Hospitality Simphony (POS) with affected versions 19.8-19.8.5, 19.9-19.9.3, and 19.10. An unauthenticated attacker with network access over HTTP can compromise Oracle Hospitality Simphony, potentially causing unauthorized create/delete/...

CVE-2026-60170

Affected product: Oracle Hospitality Simphony (Oracle Food and Beverage Applications), component: POS. Vulnerable versions: 19.8-19.8.5, 19.9-19.9.3, and 19.10. The CVE describes an easily exploitable, unauthenticated network exploit via HTTP that could lead to unauthorized access to critical dat...

CVE-2026-60166

CVE-2026-60166 affects Oracle Java SE JavaFX. Affected product/version: Oracle Java SE 8u491. The vulnerability arises in JavaFX components and can be triggered by network-accessible vectors, with exploitation requiring user interaction. Successful exploitation could lead to unauthorized read acc...

CVE-2026-60167

Oracle Hospitality Simphony POS (Oracle Food and Beverage Applications) is affected in versions 19.8-19.8.5, 19.9-19.9.3, and 19.10. The issue allows an unauthenticated attacker over HTTP with network access to compromise the system, potentially yielding unauthorized access to sensitive data or f...

CVE-2026-60165

CVE-2026-60165 is a vulnerability in Oracle Cost Management within Oracle E-Business Suite (component: Enterprise Command Center). Affected product/version is EBS V16. The issue allows a high-privilege attacker with network access over HTTP to compromise Oracle Cost Management, enabling unauthori...

CVE-2026-60164

Summary: CVE-2026-60164 identifies a vulnerability in Oracle Java SE (JavaFX) affecting Oracle Java SE 8u491. The issue could allow an unauthenticated attacker with network access (via multiple protocols) to read a subset of data, with user interaction required and no code execution; CVSS v3.1 ba...

CVE-2026-60163

CVE-2026-60163 affects Oracle MySQL Server (versions 8.4.0–8.4.10, 9.7.0–9.7.1) and MySQL Cluster (8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1) with the Group Replication Plugin. The vulnerability allows an unauthenticated attacker with local logon to the infrastructure where MySQL Server/Cluster run...

CVE-2026-60160

CVE-2026-60160 describes a vulnerability in Oracle VM VirtualBox (Core) affecting version 7.2.12. A locally caused, high-privilege exploit could allow read access to a subset of data within Oracle VM VirtualBox, with no user interaction but requiring logon to the infrastructure where VirtualBox r...

CVE-2026-60161

CVE-2026-60161 affects Oracle VM VirtualBox Core in Oracle Virtualization, with the affected version 7.2.12. The vulnerability could allow a local, unauthenticated user who can log on to the host environment and must interact with a user to trigger a hang or a frequent crash (DoS) of VirtualBox, ...

CVE-2026-60162

The CVE-2026-60162 entry concerns Oracle VM VirtualBox (Core) affecting version 7.2.12. The vulnerability is described as exploitable by a high-privilege attacker who has local logon to the infrastructure where VirtualBox runs, potentially leading to unauthorized access to critical data and parti...

CVE-2026-60157

Oracle GoldenGate (Service Manager) is affected in versions 19.1.0.0.0–19.29.0.0, 21.3–21.21, and 23.4–23.26.1.0.0. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise GoldenGate, potentially taking over the service. CVSS 3.1 base score is 8.8 (Confidenti...

CVE-2026-60158

CVE-2026-60158 affects Oracle VM VirtualBox Core (v7.2.12). A local, low-privilege attacker with logon can compromise VirtualBox, potentially gaining unauthorized data access and causing a partial denial of service. The vulnerability’s CVSS 3.1 base score is 6.4 (I and A impacts). Exploitation de...

CVE-2026-60159

Summary of CVE-2026-60159 details from connected sources : A vulnerability exists in Oracle VM VirtualBox (core component) affecting version 7.2.12. The described impact indicates a high-privilege attacker who can log on to the infrastructure where VirtualBox executes could compromise the Virtual...

CVE-2026-60154

The CVE-2026-60154 entry applies to Oracle E-Business Suite’s Oracle Application Object Library (Core). Affected are Oracle Application Object Library in EBS versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (HTTP) to modify and read Oracle AOL data:...

CVE-2026-60156

The CVE concerns Oracle APEX (General) with affected versions 24.1, 24.2, and 26.1. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise Oracle APEX and gain unauthorized read access to a subset of Oracle APEX data. CVSS 3.1 base score is 5.3 (confident...

CVE-2026-60155

The CVE-2026-60155 entry relates to Oracle VM VirtualBox (Core) with affected version 7.2.12. The vulnerability is described as exploitable locally by a high-privilege attacker with logon to the infrastructure where VirtualBox executes, potentially allowing takeover of VirtualBox and affecting re...

CVE-2026-60153

The CVE-2026-60153 entry concerns Oracle WebLogic Server (Console component). Affected are WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows a high-privilege attacker with network access via HTTPS to compromise the server, potentially leading to...

CVE-2026-60150

CVE-2026-60150 affects Oracle VM VirtualBox (Core) with affected version 7.2.12. The vulnerability allows a low-privilege, logged-on attacker to compromise Oracle VM VirtualBox, potentially leading to takeover. CVSS v3.1 base score 7.8 (HIGH) with local attack vector, low attack complexity, and p...

CVE-2026-60152

CVE-2026-60152 affects Oracle PeopleSoft Enterprise PeopleTools, Panel Processor, versions 8.61 and 8.62. The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleTools, with human interaction required. Consequences include unauthorized update/insert/delete an...

CVE-2026-60149

CVE-2026-60149 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer, with affected versions 12.2.3–12.2.15. The vulnerability is described as allowing a high-privilege user who can log into the infrastructure running Oracle Workflow to cause a hang or rep...

CVE-2026-60147

CVE-2026-60147 affects Oracle Java SE and Oracle GraalVM products. Affected: Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK 17.0.19, 21.0.11; Oracle GraalVM Enterprise Edition 21.3.18. The vulnerability is exploitable over the network via multi...