CVE-2026-61092

CVE-2026-61092 affects Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware) — Client Bundle. Affected versions: 12.2.1.4.0 and 14.1.2.0.0. The vulnerability permits an unauthenticated attacker with network access over HTTP to compromise the product, potentially leading to takeover. CVSS...

CVE-2026-61090

CVE-2026-61090 affects Oracle E-Business Suite — Oracle Project Foundation (Miscellaneous). Affected: 12.2.3–12.2.15. If already logged in locally, a low-privilege user can exploit to take over Oracle Project Foundation (CVSS 3.1 base 7.8; LOCAL access, LOW privileges, NONE interaction, C/I/A HIG...

CVE-2026-61088

CVE-2026-61088 affects Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) version 9.2. Exposed vulnerability allows an unauthenticated attacker on the network (via HTTP) to compromise SCM Manufacturing, potentially leading to unauthorized access to critical data or full access t...

CVE-2026-61086

CVE-2026-61086 affects Oracle PeopleSoft, specifically the PeopleSoft Enterprise SCM Order Management product (component: Security) in version 9.2. The vulnerability is exploitable by an unauthenticated attacker over HTTPS with network access, allowing access to or disclosure of data within the S...

CVE-2026-61089

The CVE-2026-61089 entry concerns Oracle PeopleSoft Enterprise SCM Inventory (component: Security) with affected version 9.2. The vulnerability allows unauthenticated network access via HTTP to compromise SCM Inventory, potentially yielding unauthorized data access and the ability to update/inser...

CVE-2026-61087

CVE-2026-61087 affects Oracle PeopleSoft Enterprise FIN Payables (v9.2) — a vulnerability in the Security component that an unauthenticated, network-accessing attacker can exploit via HTTP to access or compromise FIN Payables data. The CVSSv3.1 base score is 7.5 (Impact: Confidentiality) with vec...

CVE-2026-61083

CVE-2026-61083 affects Oracle E-Business Suite’s Performance Management, specifically the Appraisals component, with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle Performance Management, enabling unauthoriz...

CVE-2026-61085

CVE-2026-61085 affects Oracle PeopleSoft. In the Oracle PeopleSoft SCM Inventory product (component: Security), version 9.2 is affected. The vulnerability can be exploited remotely over HTTPS by an unauthenticated attacker to gain unauthorized access to sensitive data or potentially full access t...

CVE-2026-61084

CVE-2026-61084 affects Oracle GoldenGate (Libraries). Affected: GoldenGate supported versions 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.2. The issue allows a low-privileged attacker with logon to compromise GoldenGate, potentially causing unauthorized update/insert/delete operations and un...

CVE-2026-61082

CVE-2026-61082 affects Oracle MySQL Connectors, specifically Connector/J, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with network access across multiple protocols to compromise MySQL Connectors, and exploitation requires user interaction. The CVSS 3...

CVE-2026-61081

CVE-2026-61081 affects MySQL Server (Performance Schema) and MySQL Cluster. Affected versions: MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. vulnerability: high-privilege attacker with network access via multiple protocols can cause unauthorized...

CVE-2026-61080

Oracle E-Business Suite Public Sector Human Resources contains a vulnerability in the Regression Testing component affecting versions 12.2.3 through 12.2.15. A low-privileged, network-reachable attacker (HTTP) could obtain unauthorized update/insert/delete access to some data and unauthorized rea...

CVE-2026-61077

CVE-2026-61077 affects Oracle PeopleSoft SCM Mobile Inventory Management (component: Security) in version 9.2. The published description indicates a vulnerability accessible to a low-privileged attacker with logon to the infrastructure hosting PeopleSoft SCM Mobile Inventory Management, potential...

CVE-2026-61079

CVE-2026-61079 affects Oracle GoldenGate (Libraries). Affected versions include 19.1.0.0.0–19.30.0.0, 21.3–21.21, and 23.4–23.26.2. The vulnerability is exploitable by a high-privilege attacker who can log on to the infrastructure where GoldenGate runs and requires user interaction. Successful ex...

CVE-2026-61078

CVE-2026-61078 affects Oracle PeopleSoft 9.2, specifically the CC Common Application Objects component. The flaw exists in the Common Application Objects and can be exploited by a low-privilege, network-connected attacker over HTTP; exploitation requires user interaction. Impact is unauthorized c...

CVE-2026-61075

CVE-2026-61075 describes a vulnerability in Oracle E-Business Suite, Oracle Self-Service Human Resources (Internal Operations). Affected are EBS 12.2.3–12.2.15; the issue is exploitable by a low-privileged, network-reachable attacker over HTTP, potentially leading to unauthorized update/insert/de...

CVE-2026-61074

The CVE-2026-61074 concern affects Oracle PeopleSoft FIN Common Objects Brazil (component: eProcurement) with affected version 9.1. The vulnerability is exploitable by an unauthenticated attacker over HTTP, enabling takeover of PeopleSoft Enterprise FIN Common Objects Brazil and is scored CVSS 3....

CVE-2026-61076

The CVE-2026-61076 entry concerns Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager (component: Job Opening). Affected product/version: PeopleSoft HCM Talent Acquisition Manager, 9.2. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise the Talent...

CVE-2026-61071

CVE-2026-61071 affects Oracle PeopleSoft (FIN Engineering Argentina) Engineering component, version 9.1. The vulnerability allows a high-privileged attacker with network access via HTTP to potentially perform unauthorized updates/inserts/deletes and read access on affected data. CVSS 3.1 base sco...

CVE-2026-61073

The CVE-2026-61073 affects Oracle PeopleSoft, specifically the FIN Common Objects Brazil product (component: Purchasing) with affected version 9.1. The vulnerability enables unauthenticated, network-accessible (via HTTP) compromise of PeopleSoft Enterprise FIN Common Objects Brazil, potentially l...