CVE-2026-81926

Concrete CMS versions 9.4.0 through 9.5.2 are affected by a cross-site scripting (XSS) vulnerability in the location panel's duplicate-path confirmation dialog . The panel's check endpoint returned the submitted page path unmodified in its JSON response, and client-side JavaScript inserted each v...

CVE-2026-81925

Concrete CMS before 9.5.3 is vulnerable to reflected cross-site scripting (XSS) caused by improper neutralization of a user-supplied custom date format when rendering conversation messages. An attacker could execute arbitrary JavaScript in a victim's browser by tricking them into submitting a cra...

CVE-2026-87289

CVE-2026-87289 affects the helidon-webserver-static-content component of Oracle Helidon (Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can trigger a hang or frequently repeatable crash, resulting in a complete denial of service ...

CVE-2026-87285

CVE-2026-87285 is a vulnerability in the Core component of Oracle VM VirtualBox 7.2.16 (Oracle Virtualization). A high-privileged local attacker can trigger a complete denial of service —causing a hang or frequently repeatable crash of VirtualBox. The scope change indicates the attack may signifi...

CVE-2026-87284

Oracle VM VirtualBox (component: Core ) version 7.2.16 is affected by a locally exploitable vulnerability. An attacker with high privileges and local logon can cause a partial denial of service (partial DOS). Although the flaw resides in VirtualBox, the scope change indicates attacks may signific...

CVE-2026-87281

Oracle VM VirtualBox (component: Core ), version 7.2.16 , is affected by a local vulnerability requiring high-privileged attacker access to the host. The attack vector is local with low complexity and no user interaction. A successful exploit results in unauthorized read access to a subset of Vir...

CVE-2026-87282

CVE-2026-87282 affects the Core component of Oracle VM VirtualBox version 7.2.16 . The vulnerability allows a high-privileged local attacker to cause a complete denial of service (hang or frequent crash) of VirtualBox. Due to a scope change , the attack may significantly impact additional product...

CVE-2026-87283

CVE-2026-87283 affects the Core component of Oracle VM VirtualBox version 7.2.16 . The vulnerability is easily exploitable by a high-privileged local attacker and results in a complete denial of service (hang or repeatable crash). A notable aspect is the scope change : while the flaw resides in V...

CVE-2026-87279

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to cause a complete denial of service (hang or frequently repeatable crash) and unauthorized modification, insertion, or deletion of accessible data. The CVS...

CVE-2026-87278

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability allowing an unauthenticated attacker with logon to the host to trigger a complete denial of service (hang or repeatable crash) and unauthorized modification of accessible data. The attack requires user interaction...

CVE-2026-87280

Oracle VM VirtualBox (Oracle Virtualization), Core component, version 7.2.16 , contains an easily exploitable vulnerability that allows a high-privileged local attacker to cause a complete denial of service (hang or frequently repeatable crash). The attack requires user interaction from someone o...

CVE-2026-87275

Oracle VM VirtualBox (Oracle Virtualization), component Core , version 7.2.16 is affected by a vulnerability rated CVSS 3.1 4.6 (Medium) . A high-privileged local attacker with logon to the infrastructure can exploit it with low complexity, resulting in unauthorized read access to a subset of Vir...

CVE-2026-87277

Oracle VM VirtualBox (component: Core , version 7.2.16 ) is affected by an easily exploitable denial-of-service vulnerability. An unauthenticated attacker with network access via RDP can cause a hang or frequently repeatable crash, resulting in a complete DoS. The CVSS 3.1 base score is 7.5 (HIGH...

CVE-2026-87276

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to the host to achieve full takeover of the product, with high impact on confidentiality, integrity, and availability . The attack is rated difficult to expl...

CVE-2026-87274

Oracle VM VirtualBox (component: Core ) version 7.2.16 is affected by a local vulnerability that allows a low-privileged attacker with logon access to cause a complete denial of service (hang or frequently repeatable crash). The attack is rated as difficult to exploit , requiring human interactio...

CVE-2026-87272

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local privilege escalation vulnerability (CVE-2026-87272). A low-privileged attacker with logon access to the host can exploit this with low complexity and no user interaction to achieve full confidentiality, integrity, and availabil...

CVE-2026-87273

This vulnerability affects the Core component of Oracle VM VirtualBox version 7.2.16 (Oracle Virtualization). An unauthenticated attacker with local access to the host infrastructure can exploit it with low complexity, though user interaction is required. The vulnerability allows takeover of Orac...

CVE-2026-87271

A vulnerability in the Core component of Oracle VM VirtualBox version 7.2.16 (Windows host only) allows a low-privileged local attacker to achieve takeover of the product. The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity, no user interaction required, and high impact on confidentiali...

CVE-2026-87270

Oracle VM VirtualBox version 7.2.16 (component: Core , Windows host only ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to achieve full takeover of the VirtualBox environment. The attack requires local access, has low complexity, and no user interac...

CVE-2026-87268

Oracle VM VirtualBox (component: Core ), version 7.2.16 , is affected by a local vulnerability that allows a low-privileged attacker with logon access to fully compromise the host (Confidentiality, Integrity, and Availability impacts all rated High ). The attack vector is local with low complexit...