CVE-2026-61100

CVE-2026-61100 affects Oracle WebCenter Enterprise Capture (Client Bundle) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated, network-accessible attacker via HTTP to compromise the product, with potential takeover and impact to confi...

CVE-2026-61098

CVE-2026-61098 affects Oracle WebCenter Enterprise Capture (Product: Oracle Fusion Middleware) in the Client Bundle component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to compromise systems, po...

CVE-2026-61097

CVE-2026-61097 describes a vulnerability in Oracle Financial Services Applications, specifically the Oracle Banking Trade Finance Process Management product (component: Common). Affected are versions 14.6.0 through 14.8.0. The flaw enables an unauthenticated attacker with network access via HTTP ...

CVE-2026-61096

CVE-2026-61096 affects Oracle MySQL Server and MySQL Cluster (Server: Pluggable Auth). Affected versions: MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with logon to the infrastructure where MySQ...

CVE-2026-61093

The CVE-2026-61093 entry concerns Oracle MySQL: Server (Optimizer) with affected MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability allows a low-privilege attacker who can reach the server over multiple protocols to cause the MySQL Server/Cluster to hang or crash (complete ...

CVE-2026-61095

The CVE-2026-61095 entry concerns Oracle Communications Unified Inventory Management (component: Security). Affected supported versions are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. The issue is exploitable by a low-privileged attacker with network access via HTTP, potentially resulting in un...

CVE-2026-61094

CVE-2026-61094 affects Oracle MySQL Server (Server: Replication) and MySQL Cluster. Affected versions include MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability is exploitable with network access via multiple protocols and can l...

CVE-2026-61092

CVE-2026-61092 affects Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware) — Client Bundle. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability permits an unauthenticated attacker with network access over HTTP to compromise the product, potentially leading to takeover. CVSS...

CVE-2026-61091

CVE-2026-61091 affects Oracle Communications Billing and Revenue Management (BRM Server). Affected versions are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The flaw is exploitable locally by a low-privilege user with logon to the infrastructure hosting BRM, potentially leading to takeover ...

CVE-2026-61090

CVE-2026-61090 affects Oracle E-Business Suite — Oracle Project Foundation (Miscellaneous). Affected: 12.2.3–12.2.15. If already logged in locally, a low-privilege user can exploit to take over Oracle Project Foundation (CVSS 3.1 base 7.8; LOCAL access, LOW privileges, NONE interaction, C/I/A HIG...

CVE-2026-61087

CVE-2026-61087 affects Oracle PeopleSoft Enterprise FIN Payables (v9.2) — a vulnerability in the Security component that an unauthenticated, network-accessing attacker can exploit via HTTP to access or compromise FIN Payables data. The CVSSv3.1 base score is 7.5 (Impact: Confidentiality) with vec...

CVE-2026-61089

The CVE-2026-61089 entry concerns Oracle PeopleSoft Enterprise SCM Inventory (component: Security) with affected version 9.2. The vulnerability allows unauthenticated network access via HTTP to compromise SCM Inventory, potentially yielding unauthorized data access and the ability to update/inser...

CVE-2026-61086

CVE-2026-61086 affects Oracle PeopleSoft, specifically the PeopleSoft Enterprise SCM Order Management product (component: Security) in version 9.2. The vulnerability is exploitable by an unauthenticated attacker over HTTPS with network access, allowing access to or disclosure of data within the S...

CVE-2026-61088

CVE-2026-61088 affects Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) version 9.2. Exposed vulnerability allows an unauthenticated attacker on the network (via HTTP) to compromise SCM Manufacturing, potentially leading to unauthorized access to critical data or full access t...

CVE-2026-61083

CVE-2026-61083 affects Oracle E-Business Suite’s Performance Management, specifically the Appraisals component, with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle Performance Management, enabling unauthoriz...

CVE-2026-61084

CVE-2026-61084 affects Oracle GoldenGate (Libraries). Affected: GoldenGate supported versions 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.2. The issue allows a low-privileged attacker with logon to compromise GoldenGate, potentially causing unauthorized update/insert/delete operations and un...

CVE-2026-61085

CVE-2026-61085 affects Oracle PeopleSoft. In the Oracle PeopleSoft SCM Inventory product (component: Security), version 9.2 is affected. The vulnerability can be exploited remotely over HTTPS by an unauthenticated attacker to gain unauthorized access to sensitive data or potentially full access t...

CVE-2026-61081

CVE-2026-61081 affects MySQL Server (Performance Schema) and MySQL Cluster. Affected versions: MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. vulnerability: high-privilege attacker with network access via multiple protocols can cause unauthorized...

CVE-2026-61080

Oracle E-Business Suite Public Sector Human Resources contains a vulnerability in the Regression Testing component affecting versions 12.2.3 through 12.2.15. A low-privileged, network-reachable attacker (HTTP) could obtain unauthorized update/insert/delete access to some data and unauthorized rea...

CVE-2026-61082

CVE-2026-61082 affects Oracle MySQL Connectors, specifically Connector/J, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with network access across multiple protocols to compromise MySQL Connectors, and exploitation requires user interaction. The CVSS 3...