CVE-2026 records published in August 2026
Page six of 13: records 5,001 to 6,000 of the 12,071 published in August 2026, newest first. The first page carries the figures for August 2026.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2026-71006 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-71005 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-71004 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-71003 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-71002 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-71001 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-71000 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70999 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70998 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 9.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70997 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 9.1CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70996 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70995 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70994 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 9.1CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70993 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70992 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager takeover | 7.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70991 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 6.3CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70990 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70989 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70988 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70987 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70986 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70985 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70984 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70983 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70982 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70981 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70980 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager takeover | 9.0CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70979 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70978 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70977 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70976 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70975 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70974 | Oracle Hyperion Financial Management Security component unauthorized data access | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70973 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70972 | Oracle Hyperion Infrastructure Technology unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70971 | Oracle Hyperion Infrastructure Technology unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70970 | Oracle WebCenter Portal Runtime tools component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70969 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70968 | Oracle Hyperion Infrastructure Technology unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70967 | Oracle Hyperion Infrastructure Technology unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70966 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70965 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70964 | Oracle Hyperion Infrastructure Technology unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70963 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 4.2CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70962 | Oracle Hyperion Infrastructure Technology information disclosure | 3.3CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70961 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70960 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70959 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70958 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 9.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70957 | Oracle Hyperion Infrastructure Technology unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70956 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70955 | Oracle Commerce Platform Dynamo Application Framework component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70954 | Oracle Commerce Platform Dynamo Application Framework component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70953 | Oracle Commerce Platform Dynamo Application Framework component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70952 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70951 | Oracle Siebel CRM End User Document Management component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70950 | Oracle Hyperion Financial Management Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70949 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70948 | Oracle E-Business Suite Purchasing Other issue component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70947 | Oracle E-Business Suite Purchasing Other issue component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70946 | Oracle Hyperion Financial Management Security component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70945 | Oracle E-Business Suite Payroll Internal Operations component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70944 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70943 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70942 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70941 | Oracle E-Business Suite Payroll Internal Operations component takeover | 8.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70940 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70939 | Oracle Hyperion Financial Management Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70938 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70937 | Oracle Hyperion Financial Management Security component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70936 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70935 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70934 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70933 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70932 | Oracle E-Business Suite Order Management Product Diagnostic tools component unauthorized data access | 7.2CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70931 | Oracle E-Business Suite Workflow Notification Mailer component unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70930 | Oracle E-Business Suite Order Management Product Diagnostic tools component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70929 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70928 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70927 | Oracle E-Business Suite Workflow Notification Mailer component denial of service | 7.5CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70926 | Oracle E-Business Suite Workflow Notification Mailer component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70925 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70924 | Oracle Web Services Manager Web Services Security component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70923 | Oracle Helidon Imperative Web Server component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70922 | Oracle Financial Services Enterprise Case Management Web UI component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70921 | Oracle Hyperion Financial Management Security component unauthorized data access | 10.0CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70920 | Oracle Hyperion Financial Management Security component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70919 | Oracle Hyperion Financial Management Security component unauthorized data modification | 2.5CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70918 | Oracle E-Business Suite Product Hub Outbound Data component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70917 | Oracle Hyperion Financial Management Security component information disclosure | 4.0CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70916 | Oracle Hyperion Financial Management Security component information disclosure | 4.0CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70914 | Oracle Hyperion Financial Management Security component takeover | 7.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70912 | Oracle Hyperion Financial Management Security component unauthorized data modification | 5.3CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70911 | Oracle Hyperion Financial Management Security component information disclosure | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70910 | Oracle Siebel CRM Integration REST component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70909 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70908 | Oracle Helidon Imperative Web Server component denial of service | 7.5CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70907 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition denial of service | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70906 | Oracle Java SE crash | 7.5CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70905 | Oracle Access Manager agent infrastructure component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70904 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70903 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70902 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70901 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70900 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70899 | Oracle Hyperion Data Relationship Management Access and security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70898 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70897 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70896 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70895 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70894 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.7CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70893 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70892 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70891 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70890 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70889 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70888 | Oracle Hyperion Data Relationship Management Access and security component takeover | 6.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70887 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70886 | Oracle Hyperion Data Relationship Management Access and security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70885 | Oracle Hyperion Data Relationship Management Access and security component takeover | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70884 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70883 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70882 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70881 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70880 | Oracle Hyperion Data Relationship Management Access and security component takeover | 10.0CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70879 | Oracle Hyperion Data Relationship Management Access and security component takeover | 7.8CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70878 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70877 | Oracle Hyperion Data Relationship Management Access and security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70876 | Oracle Hyperion Data Relationship Management Access and security component takeover | 9.1CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70875 | Oracle Hyperion Data Relationship Management Access and security component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70874 | Oracle Hyperion Data Relationship Management Access and security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70873 | Oracle Hyperion Data Relationship Management Access and security component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70872 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70871 | Oracle Hyperion Data Relationship Management Access and security component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70870 | Oracle Hyperion Data Relationship Management Web client - Unicode component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70868 | Oracle Application Testing Suite takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70867 | Oracle Application Testing Suite unauthorized access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70866 | Oracle Application Testing Suite takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70865 | Oracle Application Testing Suite takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70864 | Oracle Application Testing Suite improper access control | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70863 | Oracle Application Testing Suite takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70862 | Oracle Application Testing Suite improper access control | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70861 | Oracle PeopleSoft Enterprise FIN Common Objects Brazil takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70859 | Oracle Siebel CRM Integration REST component takeover | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70858 | Oracle WebCenter Content Server component unauthorized data modification | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70857 | Oracle Siebel CRM End User Open UI component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70856 | Oracle Siebel CRM Deployment Migration component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70855 | Oracle Siebel Apps - Self Service Helpdesk/Training component unauthorized data access | 9.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70854 | Oracle Hyperion Financial Management Security component unauthorized data modification | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70853 | Oracle Hyperion Financial Management Security component denial of service | 3.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70852 | Oracle Supply Chain Demand Planning Internal Operations component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70851 | Oracle Hyperion Financial Management Security component denial of service | 3.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70850 | Oracle Hyperion Financial Management Security component unauthorized data modification | 3.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70849 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.5CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70848 | Oracle Hyperion Financial Management Security component information disclosure | 3.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70847 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70846 | Oracle Supply Chain Demand Planning Internal Operations component unauthorized data access | 9.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70845 | Oracle E-Business Suite Loans Internal Operations component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70844 | Oracle E-Business Suite Loans Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70843 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70842 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70841 | Oracle Hyperion Financial Management Security component unauthorized data access | 5.6CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70840 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70839 | Oracle E-Business Suite Financials for EMEA Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70838 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70837 | Oracle E-Business Suite Financials for Asia/Pacific unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70836 | Oracle Hyperion Financial Management Security component unauthorized data access | 5.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70835 | Oracle E-Business Suite iRecruitment Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70834 | Oracle Hyperion Financial Management Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70833 | Oracle E-Business Suite Landed Cost Management unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70832 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70831 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70830 | Oracle E-Business Suite Process Manufacturing Systems unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70829 | Oracle E-Business Suite Process Manufacturing Systems Internal Operations component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70828 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70827 | Oracle MES for Process Manufacturing Internal Operations component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70826 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70825 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70824 | Oracle Hyperion Financial Management Security component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70823 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70822 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70821 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70820 | Oracle E-Business Suite Call Center Technology Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70819 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70818 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70817 | Oracle Hyperion Financial Management Security component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70816 | Oracle E-Business Suite Financials for EMEA Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70815 | Oracle E-Business Suite Internet Procurement Connector unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70814 | Oracle E-Business Suite Call Center Technology Internal Operations component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70813 | Oracle E-Business Suite Call Center Technology Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70812 | Oracle E-Business Suite Call Center Technology Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70811 | Oracle E-Business Suite Purchasing Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70810 | Oracle E-Business Suite Scripting Internal Operations component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70809 | Oracle E-Business Suite Scripting Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70808 | Oracle E-Business Suite Scripting Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70807 | Oracle E-Business Suite Call Center Technology unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70806 | Oracle E-Business Suite E-Business Tax Internal Operations component unauthorized data modification | 7.1CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70805 | Oracle Project Planning and Control Change Management component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70804 | Oracle Public Sector Human Resources Regression Testing component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70803 | Oracle E-Business Suite General Ledger Internal Operations component unauthorized data modification | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70802 | Oracle Public Sector Human Resources Regression Testing component takeover | 8.0CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70801 | Oracle E-Business Suite Flow Manufacturing Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70800 | Oracle E-Business Suite SDP Number Portability unauthorized data modification | 7.3CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70799 | Oracle E-Business Suite SDP Number Portability unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70798 | Oracle E-Business Suite Purchasing Internal Operations component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70797 | Oracle E-Business Suite Purchasing Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70796 | Oracle E-Business Suite General Ledger Internal Operations component unauthorized data access | 7.2CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70795 | Oracle E-Business Suite Applications Platform Engineering Valid Session component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70794 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 4.7CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70793 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 4.2CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70792 | Oracle E-Business Suite Yard Management Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70791 | Oracle E-Business Suite Transportation Execution unauthorized data modification | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70790 | Oracle E-Business Suite Telecommunications Billing Integrator unauthorized data modification | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70789 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 5.9CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70788 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70787 | Oracle Hyperion Financial Reporting Server component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70786 | Oracle E-Business Suite Service Fulfillment Manager unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70785 | Oracle Hyperion Financial Reporting Server component information disclosure | 3.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70784 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 5.3CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70783 | Oracle E-Business Suite Service Contracts Internal Operations component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70782 | Oracle E-Business Suite Labor Distribution Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70781 | Oracle E-Business Suite Proposals Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70780 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70779 | Oracle E-Business Suite iSupplier Portal Internal Operations component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70778 | Oracle E-Business Suite Customer Care Internal Operations component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70777 | Oracle E-Business Suite iSupplier Portal Internal Operations component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70776 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 2.6CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70775 | Oracle E-Business Suite Installed Base User interface component unauthorized data modification | 6.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70774 | Oracle E-Business Suite Warehouse Management unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70773 | Oracle E-Business Suite HCM Common Architecture unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70772 | Oracle E-Business Suite Warehouse Management Internal Operations component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70771 | Oracle E-Business Suite Warehouse Management Internal Operations component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70770 | Oracle E-Business Suite Warehouse Management Internal Operations component unauthorized data access | 8.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70769 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70768 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70767 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70766 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70765 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70764 | Oracle E-Business Suite General Ledger Internal Operations component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70763 | Oracle E-Business Suite Operations Intelligence Daily Business Intelligence component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70762 | Oracle E-Business Suite Risk Management Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70761 | Oracle E-Business Suite Risk Management Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70760 | Oracle E-Business Suite Order Management Product Diagnostic tools component unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70759 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70758 | Oracle Hyperion Financial Reporting Server component unauthorized data modification | 5.3CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70754 | Oracle Hyperion Financial Reporting Server component information disclosure | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70753 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 6.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70752 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70751 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70750 | Oracle Hyperion Financial Reporting Server component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70749 | Oracle Hyperion Financial Reporting Server component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70747 | Oracle E-Business Suite Customers Online Customer Tab component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70746 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70745 | Oracle Hyperion Financial Reporting Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70744 | Oracle Hyperion Financial Reporting Server component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70743 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70742 | Oracle Hyperion Financial Reporting Server component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70741 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70740 | Oracle Hyperion Financial Reporting Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70739 | Oracle Hyperion Financial Reporting Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70738 | Oracle Hyperion Profitability and Cost Management Deployment component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70737 | Oracle Enterprise Manager for Systems Infrastructure Storage Server Management component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70736 | Oracle Hyperion Profitability and Cost Management Deployment component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70735 | Oracle Hyperion Profitability and Cost Management Deployment component takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70734 | Oracle Autonomous Health Framework improper access control | 7.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70733 | Oracle Hyperion Profitability and Cost Management Deployment component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70732 | Oracle E-Business Suite Mobile Application Server unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70731 | Oracle Autonomous Health Framework improper access control | 8.4CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70730 | Oracle Hyperion Profitability and Cost Management Deployment component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70729 | Oracle E-Business Suite Teleservice service request form component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70728 | Oracle Autonomous Health Framework improper access control | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70727 | Oracle Helidon Imperative Web Server component information disclosure | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70726 | Oracle E-Business Suite Cash Management Internal Operations component unauthorized data access | 6.0CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70725 | Oracle E-Business Suite Advanced Inbound Telephony unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70724 | Oracle MySQL Cluster General component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70723 | Oracle Hyperion Profitability and Cost Management Deployment component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70722 | Oracle E-Business Suite Advanced Inbound Telephony unauthorized data modification | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70721 | Oracle Hyperion Profitability and Cost Management Deployment component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70720 | Oracle E-Business Suite Production Scheduling Internal Operations component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70719 | Oracle Hyperion Calculation Manager Security component information disclosure | 4.0CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70718 | Oracle E-Business Suite Bills of Material Internal Operations component takeover | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70717 | Oracle Autonomous Health Framework improper access control | 7.7CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70716 | Oracle Helidon Imperative Web Server component unauthorized data modification | 5.9CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70715 | Oracle Autonomous Health Framework improper access control | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70714 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 4.1CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70713 | Oracle E-Business Suite iSetup General Ledger Update Transform, Reports component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70712 | Oracle Agile Engineering Data Management Install component takeover | 6.4CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70711 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 3.6CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70710 | Oracle E-Business Suite Sales Foundation Security API component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70709 | Oracle Agile Engineering Data Management unauthorized data modification | 4.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70708 | Oracle E-Business Suite Sales Foundation Security API component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70707 | Oracle E-Business Suite Sales for Handhelds Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70706 | Oracle E-Business Suite Sales Internal Operations component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70705 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70704 | Oracle E-Business Suite Trading Community Party Search UI component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70703 | Oracle Agile Engineering Data Management unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70702 | Oracle E-Business Suite Payments File Transmission component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70701 | Oracle E-Business Suite Payables Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70700 | Oracle E-Business Suite Payables Internal Operations component denial of service | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70699 | Oracle E-Business Suite Payments File Transmission component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70698 | Oracle Agile Engineering Data Management Install component takeover | 6.7CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70697 | Oracle Agile Engineering Data Management Engineering Communication interface component takeover | 7.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70696 | Oracle E-Business Suite Payments File Transmission component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70695 | Oracle E-Business Suite Payments File Transmission component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70694 | Oracle E-Business Suite Payments File Transmission component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70693 | Oracle Agile Engineering Data Management Engineering Communication interface component takeover | 6.3CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-70692 | Oracle E-Business Suite Marketing Encyclopedia System unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70691 | Oracle Agile Engineering Data Management Engineering Communication interface component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70690 | Oracle E-Business Suite HRMS (US) US Payroll - General component takeover | 8.0CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70689 | Oracle Essbase takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70688 | Oracle Essbase takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70687 | Oracle E-Business Suite Marketing Audience component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70686 | Oracle E-Business Suite General Ledger Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70685 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 7.9CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70684 | Oracle Enterprise Manager Base Platform Agent Next Gen component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70683 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 4.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70682 | Oracle Hyperion Calculation Manager Security component information disclosure | 3.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70681 | Oracle E-Business Suite Applications DBA JRI and other Java utils component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70680 | Oracle E-Business Suite Applications DBA Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70679 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70678 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70677 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 5.9CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70676 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 7.0CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70675 | Oracle Reports Developer Security and Authentication component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70674 | Oracle Reports Developer Security and Authentication component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70673 | Oracle Reports Developer Security and Authentication component unauthorized data access | 9.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70672 | Oracle Reports Developer Security and Authentication component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70671 | Oracle Reports Developer Security and Authentication component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70670 | Oracle Reports Developer Security and Authentication component takeover | 9.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70669 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-70668 | Oracle Reports Developer Security and Authentication component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-70667 | Lemur: SSRF protection in certificate revocation checking bypassable | 6.3CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70666 | Lemur: Server-side request forgery via the ACME client following server-controlled URLs | 7.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-70657 | Copyparty: File/dirkey confusion | 4.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-70415 | Dell PowerStore 500T buffer overflow | 8.1CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-69220 | RabbitMQ Java client table and array decoder denial of service | 8.7CNA v4.0 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-69219 | RabbitMQ Java client long-string decoder denial of service | 8.7CNA v4.0 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-69189 | Hoppscotch: Cross-user private data exposure and UserHistory IDOR via team GraphQL resolvers | 7.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-69160 | OpenList: Arbitrary file read via Path Prefix Confusion in Share Creation API | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-68939 | pyenv version file parsing argument injection | 2.0CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-68927 | MobSF: SSRF port restriction bypass in assetlinks_check | 3.0CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-68924 | MobSF: Zip bomb denial of service via Per-File Size Limit Bypass in ZIP/APK Extraction | 4.9CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-68923 | MobSF: CSRF checks not enforced after Django migration | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-68922 | MobSF: Arbitrary file read via path traversal in ZIP Uploads | 5.5CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-68568 | MasterStudy LMS WordPress plugin privilege escalation | 6.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-68567 | WP Grids Convert Pro plugin cross-site scripting | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-68565 | GeoDirectory WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-67921 | Halo CMS versions up to cross-site request forgery | 9.3CISA ADP v3.1 | 0.3% | 2026-08-18 | KCV |
| CVE-2026-67920 | Halo migration workdir restore external control of a file path | 8.8CISA ADP v3.1 | 0.9% | 2026-08-18 | |
| CVE-2026-67846 | BOOM NBDTLB incorrect privilege assignment | 7.8CISA ADP v3.1 | 0.2% | 2026-08-18 | |
| CVE-2026-67443 | FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate | 9.2CNA v4.0 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-67442 | FUXA business logic flaw: Role Deletion without User Assignment Cleanup | 2.0CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-67440 | FUXA: Unauthenticated Socket.IO read events | 6.9CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-67271 | Dell PowerStore 500T out-of-bounds write | 9.8CNA v3.1 | 0.8% | 2026-08-18 | Fix |
| CVE-2026-67262 | Dell PowerStore 500T missing authorization | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-66793 | Red Hat Advanced Cluster Management for Kubernetes privilege escalation | 8.8CNA v3.1 | 0.8% | 2026-08-18 | Fix |
| CVE-2026-66783 | Red Hat Advanced Cluster Management for Kubernetes submariner-operator arbitrary code execution | 4.4CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-66782 | Red Hat Advanced Cluster Management for Kubernetes Submariner operator improper privilege management | 5.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-66781 | Red Hat Advanced Cluster Management for Kubernetes missing authentication | 5.4CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-66780 | Red Hat Advanced Cluster Management for Kubernetes information disclosure | 6.5CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-66679 | Appointment Hour Booking WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-66667 | Templately WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-66651 | MultiVendorX WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-66646 | WP Tab Widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | |
| CVE-2026-66645 | Table Of Contents Block WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-66644 | Typing Effect WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | |
| CVE-2026-66643 | Wufoo Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | |
| CVE-2026-66641 | Video Conferencing with Zoom WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-66640 | Login With Ajax WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | |
| CVE-2026-66639 | WPZOOM Forms Contact Form plugin for Gutenberg WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-66638 | Frontend Admin by DynamiApps WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-66637 | Featured Video Plus WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | |
| CVE-2026-66636 | Wise Chat WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-66635 | Slider by 10Web WordPress plugin cross-site request forgery (CSRF) | 7.4CNA v3.1 | 0.2% | 2026-08-18 | |
| CVE-2026-66634 | Modal Survey WordPress plugin insecure direct object references (IDOR) | 4.3CNA v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-66633 | Fluent Forms Pro Add On Pack WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-66629 | Kirki WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Reported exploitedFix |
| CVE-2026-66627 | GP Premium WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-66622 | Depicter Slider WordPress plugin SQL injection | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-66621 | Ultimate Dashboard Pro WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-66620 | OptionTree WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.5% | 2026-08-18 | |
| CVE-2026-66603 | Draft List WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-66602 | HashBar WordPress Notification Bar plugin cross-site request forgery (CSRF) | 8.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-66591 | Media LIbrary Assistant WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-66589 | B2BKing WordPress plugin broken access control | 5.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-66046 | libexpat Expat denial of service via storeAtts Quadratic Complexity | 8.7CNA v4.0 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-65985 | FUXA: SSRF hardening for `device-webapi-request` | 6.0CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-65984 | FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions | 7.5CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-65959 | Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data | 5.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-63643 | MagicMirror: Ssrf calendar .js | 6.3CNA v4.0 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-63642 | MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery | 6.3CNA v4.0 | 0.5% | 2026-08-18 | Exploit codeFix |
| CVE-2026-63641 | MagicMirror Socket.IO module namespaces improper access control | 2.3CNA v4.0 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-63640 | MagicMirrorOrg MagicMirror socket dispatcher information disclosure | 4.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-63639 | Valkey: UAF in stream deserialization may lead to remote code execution | 8.8CNA v3.1 | 1.2% | 2026-08-18 | Fix |
| CVE-2026-63632 | ONNX: Heap-Buffer-Overflow read in Gemm Version Converter Adapter via Undersized Input Shape | 3.3CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-63337 | RabbitMQ Java client JSON-RPC ProcedureDescription unsafe reflection | 7.5CNA v4.0 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-63336 | RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol enables MITM | 5.1CNA v4.0 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-63335 | RabbitMQ Java client malformed body frame triggers raw command assembler exception | 6.3CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-63328 | Trivy: Path traversal in Trivy Plugin Manager allows arbitrary file write | 6.8CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62988 | Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints | 9.0CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-62684 | filebrowser file Browser: Share API exposes the password hash and bypass token | 2.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62640 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62639 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62638 | Oracle Reports Developer Security and Authentication component unauthorized data modification | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62637 | Oracle Reports Developer Security and Authentication component unauthorized data access | 9.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62636 | Oracle Reports Developer Security and Authentication component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62635 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62634 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62633 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62632 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62631 | Oracle Reports Developer Security and Authentication component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62630 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62629 | Oracle Reports Developer Security and Authentication component unauthorized data modification | 9.4CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62628 | Oracle Reports Developer Security and Authentication component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62627 | Oracle Reports Developer Security and Authentication component unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62626 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62625 | Oracle Reports Developer Security and Authentication component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62624 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62623 | Oracle Reports Developer Security and Authentication component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62622 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62621 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62620 | Oracle Reports Developer Security and Authentication component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62619 | Oracle Reports Developer Security and Authentication component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62618 | Oracle Reports Developer Security and Authentication component unauthorized data access | 9.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62617 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62616 | Oracle Reports Developer Security and Authentication component unauthorized data modification | 7.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62615 | Oracle Reports Developer Security and Authentication component takeover | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62614 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62613 | Oracle Reports Developer Security and Authentication component unauthorized data access | 9.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62612 | Oracle Reports Developer Security and Authentication component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62611 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62610 | Oracle Reports Developer Security and Authentication component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62609 | Oracle Reports Developer Security and Authentication component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62608 | Oracle Reports Developer Security and Authentication component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62607 | Oracle E-Business Suite Customer Care Internal Operations component unauthorized data access | 8.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62606 | Oracle Hyperion Calculation Manager Security component information disclosure | 3.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62605 | Oracle E-Business Suite Partner Management Internal Operations component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62604 | Oracle Hyperion Calculation Manager Security component information disclosure | 3.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62603 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62602 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 8.0CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62601 | Oracle E-Business Suite Sales Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62600 | Oracle E-Business Suite Sales Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62599 | Oracle E-Business Suite Trading Community unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62598 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62596 | Oracle Siebel CRM Integration Open Integration component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62595 | Oracle Siebel CRM Integration Open Integration component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62594 | Oracle Siebel CRM Integration Open Integration component unauthorized data modification | 7.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62593 | Oracle Siebel CRM Integration Open Integration component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62592 | Oracle Siebel CRM Integration Open Integration component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62591 | Oracle Siebel CRM Integration Open Integration component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62590 | Oracle Siebel CRM Integration Open Integration component takeover | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62589 | Oracle Siebel CRM Integration Open Integration component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62588 | Oracle Siebel CRM Integration Open Integration component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62587 | Oracle Siebel CRM Administration Data Archival component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62586 | Oracle Siebel CRM Administration Data Archival component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62585 | Oracle Siebel CRM Administration Data Archival component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62584 | Oracle Hyperion Infrastructure Technology information disclosure | 4.0CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62583 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 3.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-62582 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 9.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62581 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62580 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 2.6CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62579 | Oracle Hyperion Infrastructure Technology information disclosure | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62578 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62577 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 3.3CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-62576 | Oracle Hyperion Infrastructure Technology unauthorized data access | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62575 | Oracle Hyperion Infrastructure Technology unauthorized data access | 4.7CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-62573 | Oracle Hyperion Infrastructure Technology unauthorized data access | 5.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62572 | Oracle Hyperion Infrastructure Technology unauthorized data access | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62571 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62570 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 3.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-62569 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 3.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62568 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62566 | Oracle Hyperion Infrastructure Technology information disclosure | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62564 | Oracle Hyperion Infrastructure Technology unauthorized data access | 5.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62558 | Oracle Hyperion Infrastructure Technology unauthorized data access | 6.3CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-62555 | Oracle Hyperion Infrastructure Technology unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62554 | Oracle Hyperion Infrastructure Technology unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62553 | Oracle Hyperion Infrastructure Technology unauthorized data access | 5.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62552 | Oracle Hyperion Infrastructure Technology unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62551 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 7.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62550 | Oracle Hyperion Infrastructure Technology unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62545 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62544 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62543 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62541 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62540 | Oracle E-Business Suite Cost Management Cost Planning component takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62539 | Oracle Hyperion Infrastructure Technology Installation and Configuration component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62538 | Oracle Hyperion Infrastructure Technology unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62537 | Oracle Hyperion Infrastructure Technology unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62536 | Oracle Hyperion Infrastructure Technology unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62535 | Oracle Hyperion Infrastructure Technology unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62533 | Oracle Hyperion Calculation Manager Security component information disclosure | 3.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62532 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 3.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62531 | Oracle Hyperion Infrastructure Technology Lifecycle Management component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62529 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 3.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62526 | Oracle Hyperion Infrastructure Technology Common Security component unauthorized data modification | 3.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62523 | Oracle Hyperion Infrastructure Technology Common Security component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62522 | Oracle Hyperion Infrastructure Technology Common Security component unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62520 | Oracle Hyperion Infrastructure Technology Common Events component unauthorized data modification | 4.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62512 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62511 | Oracle Hyperion Infrastructure Technology unauthorized data modification | 3.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-62510 | Oracle Hyperion Infrastructure Technology information disclosure | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62509 | Oracle Hyperion Infrastructure Technology Common Events component information disclosure | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62506 | Oracle Hyperion Infrastructure Technology Common Security component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62502 | Oracle Hyperion Infrastructure Technology Common Events component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62501 | Oracle Hyperion Infrastructure Technology Common Events component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62500 | Oracle Hyperion Infrastructure Technology Common Events component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62499 | Oracle Hyperion Infrastructure Technology Common Security component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62492 | Oracle Hyperion Infrastructure Technology Common Security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62491 | Oracle E-Business Suite Purchasing Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62485 | Oracle Hyperion Infrastructure Technology Common Events component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62481 | Oracle Hyperion Infrastructure Technology Common Events component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62477 | Oracle Hyperion Infrastructure Technology Common Security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62475 | Oracle E-Business Suite Shipping Execution Internal Operations component takeover | 6.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62471 | Oracle Hyperion Infrastructure Technology Common Events component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62467 | Oracle Hyperion Infrastructure Technology Common Events component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62463 | Oracle Hyperion Infrastructure Technology Lifecycle Management component unauthorized data access | 9.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62462 | Oracle E-Business Suite Work in Process Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62461 | Oracle Hyperion Calculation Manager Security component information disclosure | 3.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62460 | Oracle Hyperion Calculation Manager Security component information disclosure | 5.0CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62459 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 7.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62458 | Oracle E-Business Suite Work in Process Internal Operations component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62457 | Oracle Hyperion Infrastructure Technology Common Events component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62455 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data modification | 8.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62454 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62452 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62450 | Oracle E-Business Suite Flow Manufacturing Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62449 | Oracle E-Business Suite Work in Process Internal Operations component takeover | 7.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-62448 | Oracle E-Business Suite Email Center message component component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62446 | Oracle Hyperion Calculation Manager Security component information disclosure | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62442 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 8.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-62441 | Oracle Hyperion Calculation Manager Security component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62377 | libheif HEIF sequence track handling reachable assertion | 4.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-62357 | DragonflyDB dragonfly CMS.INITBYDIM integer overflow | 8.8CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62292 | libheif uncompressed tile decoder out-of-bounds read | 8.7CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-62291 | libheif uncompressed image encoder out-of-bounds write | 5.3CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-62289 | libheif clean aperture transform handling integer underflow | 4.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61696 | Forem: Stored XSS in Admin Abuse Report Rendering | 6.3CNA v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-61634 | RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max | 0.0CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-61574 | authentik RAC: Access any endpoint via an unrelated application | 8.8CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-61407 | Dell Watchdog Timer Driver exposed IOCTL without access control | 8.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-61342 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61341 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61340 | Oracle MES for Process Manufacturing Internal Operations component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61339 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 7.3CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-61332 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 8.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61331 | Oracle E-Business Suite Financials Common Modules unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61330 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61326 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61321 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61319 | Oracle E-Business Suite U.S. Federal Financials Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61318 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-61317 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61313 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 6.7CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-61308 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61307 | Oracle PeopleSoft Enterprise CC Common Application Objects takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61306 | Oracle Complex Maintenance, Repair and Overhaul Production component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61305 | Oracle BI Publisher BI Platform Security component unauthorized data access | 8.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61302 | Oracle Business Intelligence Enterprise Edition Pod Admin component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61300 | Oracle Enterprise Manager Base Platform Agent Next Gen component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-61298 | Oracle Enterprise Manager Base Platform unauthorized data access | 5.6CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-61296 | Oracle E-Business Suite Enterprise Asset Management unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61295 | Oracle WebCenter Content Server component unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-61293 | Oracle Hyperion Calculation Manager Security component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61291 | Oracle WebCenter Content Server component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-61290 | Oracle WebCenter Content Server component takeover | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61288 | Oracle WebCenter Content Server component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61286 | Oracle Enterprise Manager Base Platform Event Management component unauthorized data modification | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61284 | Oracle Enterprise Manager Base Platform Application Config console component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61281 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61276 | Oracle Hyperion Calculation Manager Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61273 | Oracle JD Edwards EnterpriseOne Tools Installation Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61272 | Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-61270 | Oracle JD Edwards EnterpriseOne Orchestrator unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61268 | Oracle JD Edwards EnterpriseOne Tools Business Logic Infra SEC component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61265 | Oracle JD Edwards EnterpriseOne Orchestrator E1 IOT Orchestrator Security component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61259 | Oracle Hyperion Calculation Manager Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61258 | Oracle Internet Directory OID LDAP Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-61248 | Oracle Internet Directory OID LDAP Server component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61241 | Oracle Internet Directory OID LDAP Server component takeover | 10.0CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-61231 | Oracle Virtual Directory Virtual Directory Server component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61230 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61229 | Oracle WebCenter Portal Runtime tools component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61228 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61227 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61222 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61219 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61215 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61213 | Oracle WebCenter Portal Runtime tools component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61212 | Oracle WebCenter Portal Runtime tools component takeover | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61208 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61206 | Oracle Hyperion Calculation Manager Security component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61199 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61198 | Oracle E-Business Suite Learning Management unauthorized data modification | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61193 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61177 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61139 | Oracle Public Sector Financials (International) unauthorized data modification | 6.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61124 | Oracle WebCenter Portal Runtime tools component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-61118 | Oracle Identity Manager OIM Legacy UI component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61066 | Oracle Identity Manager OIM Legacy UI component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61058 | Oracle WebCenter Sites takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61054 | Oracle WebCenter Sites unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61045 | Oracle WebCenter Sites unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61042 | Oracle WebCenter Sites takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61040 | Oracle WebCenter Sites takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61038 | Oracle WebCenter Sites unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61034 | Oracle WebCenter Sites takeover | 9.1CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-61033 | Oracle WebCenter Sites unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61032 | Oracle WebCenter Sites takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61029 | Oracle WebCenter Sites takeover | 9.0CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61022 | Oracle WebCenter Sites takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61021 | Oracle WebCenter Sites takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61018 | Oracle WebCenter Sites takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-61017 | Oracle WebCenter Sites takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61016 | Oracle WebCenter Sites unauthorized data modification | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61011 | Oracle WebCenter Sites unauthorized data modification | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61008 | Oracle WebCenter Sites unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61007 | Oracle WebCenter Sites unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61003 | Oracle Managed File Transfer MFT Runtime Server component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61002 | Oracle SOA Suite B2B Engine component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-61001 | Oracle Web Services Manager Web Services Security component unauthorized data access | 9.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60998 | Oracle Identity Manager Connector Microsoft Active Directory component takeover | 8.0CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60996 | Oracle Identity Manager Connector Connectors and Connector Server component unauthorized data access | 8.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60995 | Oracle Identity Manager Connector Core component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60994 | Oracle Identity Manager Connector Core component unauthorized data access | 7.2CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-60993 | Oracle Identity Manager Connector Core component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60992 | Oracle Identity Manager Connector Core component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60991 | Oracle Identity Manager Connector Core component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60990 | Oracle Identity Manager Connector Core component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60983 | Oracle WebCenter Content Server component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60981 | Oracle WebCenter Content Server component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60980 | Oracle WebCenter Content Server component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60977 | Oracle WebLogic Server WLS Core components component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60976 | Oracle E-Business Suite Scripting Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60975 | Oracle PeopleSoft Enterprise PeopleTools Security component unauthorized data access | 7.5CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-60971 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60970 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60969 | Oracle Unified Directory OUD Core component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60967 | Oracle PeopleSoft Enterprise PeopleTools nVision component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60961 | Oracle WebCenter Content Server component unauthorized data access | 8.0CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60958 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60956 | Oracle JD Edwards EnterpriseOne US Payroll takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60955 | Oracle WebCenter Content Server component unauthorized data modification | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60954 | Oracle WebCenter Content Server component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60949 | Oracle WebCenter Content Server component unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60947 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60946 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60944 | Oracle WebCenter Content Server component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60935 | Oracle WebCenter Content Server component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60934 | Oracle WebCenter Content Server component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60933 | Oracle WebCenter Content Server component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60928 | Oracle WebCenter Content Server component unauthorized data access | 8.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60921 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60916 | Oracle WebCenter Enterprise Capture Client Bundle component unauthorized data modification | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60915 | Oracle Helidon Imperative Web Server component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60914 | Oracle Unified Directory OUD Core component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60909 | Oracle WebCenter Content Server component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60906 | Oracle WebCenter Content Server component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60905 | Oracle WebCenter Content Server component unauthorized data access | 9.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60903 | Oracle WebCenter Content Server component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60902 | Oracle PeopleSoft Enterprise PeopleTools Tuxedo component takeover | 7.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-60895 | Oracle Unified Directory OUD Core component unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60889 | Oracle Unified Directory OUD Core component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60884 | Oracle PeopleSoft Enterprise PeopleTools Panel Processor component unauthorized data modification | 4.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60883 | Oracle PeopleSoft Enterprise PeopleTools PeopleCode component takeover | 7.2CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60879 | Oracle PeopleSoft Enterprise PeopleTools Configuration Manager component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60873 | Oracle PeopleSoft Enterprise PeopleTools Data Mover component unauthorized data access | 7.2CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-60866 | Oracle Service Delivery Platform Messaging Enabler component unauthorized data modification | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60865 | Oracle Service Delivery Platform Messaging Enabler component unauthorized data access | 6.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60861 | Oracle Service Delivery Platform Messaging Enabler component unauthorized data access | 9.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60860 | Oracle Service Delivery Platform Messaging Enabler component unauthorized data modification | 8.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60858 | Oracle Hyperion Calculation Manager Security component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60856 | Oracle PeopleSoft Enterprise PeopleTools Install and Packaging component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60853 | Oracle Helidon Imperative Web Server component information disclosure | 3.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60850 | Oracle Unified Directory OUD Core component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60849 | Oracle Unified Directory OUD Core component takeover | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60841 | Oracle Unified Directory OUD Core component takeover | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60831 | Oracle PeopleSoft Enterprise PeopleTools Integration Broker component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60830 | Oracle E-Business Suite Workflow Worklist component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60822 | Oracle Enterprise Manager for Systems Infrastructure agent component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60821 | Oracle PeopleSoft Enterprise PeopleTools Business Interlink component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60820 | Oracle Siebel CRM Integration REST component unauthorized data access | 7.4CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60808 | Oracle Siebel Apps - Marketing Email Marketing component unauthorized data access | 7.5CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-60803 | Oracle Siebel Apps - Marketing unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60798 | Oracle Siebel CRM Deployment Migration component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60797 | Oracle Siebel CRM Integration REST component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60796 | Oracle Siebel CRM Integration REST component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60792 | Oracle Siebel CRM Deployment Server Infrastructure component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60791 | Oracle Siebel CRM Deployment application interface component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60782 | Oracle E-Business Suite Payments File Transmission component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60781 | Oracle E-Business Suite Payments File Transmission component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60779 | Oracle Siebel Apps - Marketing unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60769 | Oracle E-Business Suite General Ledger Internal Operations component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60767 | Oracle Siebel Apps - Marketing takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60766 | Oracle Siebel CRM Integration REST component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60765 | Oracle Siebel Apps - Marketing takeover | 7.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60759 | Oracle E-Business Suite Internet Procurement Connector unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60758 | Oracle Siebel Artificial Intelligence AI component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60757 | Oracle Siebel CRM End User Search component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60754 | Oracle Siebel Apps - Marketing unauthorized data access | 9.1CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60753 | Oracle Siebel CRM Deployment Installation component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60752 | Oracle Siebel Apps - Marketing unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60751 | Oracle Siebel Apps - Marketing takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60748 | Oracle E-Business Suite General Ledger Internal Operations component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60742 | Oracle PeopleSoft Enterprise PeopleTools PIA Core Technology component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60737 | Oracle Web Services Manager Web Services Security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60733 | Oracle WebCenter Portal Composer component unauthorized data modification | 7.7CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60731 | Oracle WebCenter Portal Composer component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60730 | Oracle WebCenter Portal Composer component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60729 | Oracle WebCenter Portal Composer component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60728 | Oracle WebCenter Portal Portlet services component unauthorized data access | 9.1CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60727 | Oracle Identity Manager OIM Legacy UI component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60726 | Oracle Access Manager Authentication Engine component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60722 | Oracle Identity Manager OIM Legacy UI component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60721 | Oracle Identity Manager OIM Legacy UI component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60720 | Oracle Identity Manager OIM Legacy UI component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60716 | Oracle Identity Manager OIM Legacy UI component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60715 | Oracle Identity Manager OIM Legacy UI component takeover | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60707 | Oracle Identity Manager Security component unauthorized data access | 8.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60702 | Oracle WebLogic Server Core component takeover | 9.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60699 | Oracle WebLogic Server Core component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60698 | Oracle WebLogic Server Core component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60696 | Oracle WebLogic Server Core component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60693 | Oracle E-Business Suite General Ledger Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60682 | Oracle Hyperion Financial Reporting Repository component unauthorized data modification | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60680 | Oracle WebLogic Server Core component unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60679 | Oracle WebLogic Server Core component takeover | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60672 | Oracle WebLogic Server Core component takeover | 9.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-60592 | Oracle MySQL Cluster NDB Operator component unauthorized data modification | 8.2CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60591 | Oracle Hospitality Simphony POS component unauthorized data modification | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60590 | Oracle Hospitality Simphony POS component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60589 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition information disclosure | 3.7CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60415 | Oracle WebLogic Server Core component takeover | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60414 | Oracle Outside In Technology Outside In Core component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60413 | Oracle Outside In Technology Outside In Core component takeover | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-60412 | Oracle Outside In Technology Outside In Core component takeover | 7.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60393 | Oracle Hyperion Infrastructure Technology Lifecycle Management component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-60392 | Oracle Outside In Technology Outside In PDF Export SDK component takeover | 7.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-60391 | Oracle Hyperion Financial Reporting Server component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-59949 | yawkat LZ4 Java: JVM crash | 6.5CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-59940 | seroval fromJSON deserialization type confusion | 9.8CNA v3.1 | 0.8% | 2026-08-18 | Fix |
| CVE-2026-59915 | Dell Alienware Command Center (AWCC) least privilege violation | 7.3CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-59825 | Mastodon: Unwanted deactivation of SSL/TLS certificate verification | 7.4CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-59781 | Zabbix Agent Windows installer uncontrolled search path | 5.4CNA v4.0 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-57826 | openHiTLS X.509 chain verification improper certificate validation | 6.8CISA ADP v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-57580 | authentik SAML NameID parsing vulnerability | 9.4CNA v4.0 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-56684 | Valkey: TLS pending-data processing use-after-free may allow remote code execution | 7.5CNA v3.1 | 0.9% | 2026-08-18 | Fix |
| CVE-2026-55839 | Kestra: Stored XSS via custom Markdown [[link]] attribute injection | 8.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-55593 | Froxlor: CSRF vulnerability in Froxlor AJAX endpoint missing cross-site request forgery Protection | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-55426 | Linuxfabrik monitoring-plugins linuxfabrik-lib: Local privilege escalation using embedded command | 7.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-55166 | Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise | 9.9CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-55165 | Lemur: JWT verifier honors attacker-supplied alg, enabling ATO | 4.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-55164 | Lemur: Plaintext password storage in Lemur user-update path | 4.9CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-55163 | Lemur: Privilege escalation | 6.3CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-55162 | Lemur: Post-authentication SSRF | 6.3CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-55106 | authentik LDAP source diagnostic endpoint missing authorization | 5.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-54730 | goauthentik authentik Google Chrome device trust stage vulnerability | 8.6CNA v4.0 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-54570 | AngleSharp: HTML5 Spec Compliance: MXSS via annotation-xml HTML Integration Point Bypass | 6.9CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-54552 | sh _uid does not drop supplementary groups (incomplete privilege drop) | 7.9CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-54543 | Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields | 5.4CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-54348 | Froxlor: Second-order SQL injection | 7.2CNA v3.1 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-54347 | Froxlor DNS TXT record editor stored cross-site scripting | 8.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-53959 | 4gaBoards: Mass information disclosure on /API/users to any authenticated user | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Exploit codeFix |
| CVE-2026-53958 | 4gaBoards: SSO Pre-account takeover / Hijacking via mass assignment | 7.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-53759 | Linuxfabrik monitoring-plugins linuxfabrik-lib: Insecure creation of SQLite databases | 2.0CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-53533 | aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address | 6.9CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-53458 | ha-china blueprint-studio blueprint Studio API exposed internal exception details | 5.3CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-53457 | Blueprint Studio terminal command handler path traversal | 5.1CNA v4.0 | 0.8% | 2026-08-18 | Fix |
| CVE-2026-53456 | ha-china blueprint-studio blueprint Studio terminal SSH private key written to disk | 5.6CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-53455 | ha-china blueprint-studio blueprint Studio Git credential helper command injection | 8.6CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-53454 | ha-china blueprint-studio blueprint Studio stored Git credentials in plaintext Git credential store | 6.9CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-53453 | Blueprint Studio missing authorization | 8.7CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-52877 | Streambert: Insecure Protocol Execution in open-external IPC handler | 8.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-52876 | Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback | 8.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-52875 | Streambert: Arbitrary Directory Creation and File Manipulation via Backup handler | 8.4CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-52873 | Streambert: Global CSP Removal in Wyzie Redeem window enables Unconstrained XSS in Electron Renderer | 6.9CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-52872 | Streambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol | 8.8CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-52854 | Mediawiki/Maps: Stored XSS through the overlays parameter in the display_map parser function | 8.6CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-52829 | ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book | 7.5CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-52817 | Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation | 7.0CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-52793 | Froxlor: API Authentication bypasses 2FA Authentication | 8.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-52739 | ZEBRA: Repeated Non-Finalized Shielded Transaction Aborts Zebra before Duplicate-Nullifier Rejection | 5.9CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-52738 | ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks | 6.9CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-52737 | ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-52736 | ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache | 8.7CNA v4.0 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-52735 | ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser | 9.3CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-52734 | ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention | 5.3CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-52733 | ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-52732 | ZEBRA: Mempool transaction admission denial via single-peer inbound queue saturation | 5.3CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-52731 | ZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplate | 6.5CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-52723 | fbeta-GmbH ePA3-Service-OpenSource ePA Integration: VAU server authentication bypass | 9.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-52610 | Reportico saveTemplate parameter arbitrary file write | 9.1CISA ADP v3.1 | 1.1% | 2026-08-18 | |
| CVE-2026-52609 | Reportico reportico_criteria parameter reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-52608 | Reportico PreExecuteCode report attribute code injection | 9.8CISA ADP v3.1 | 0.9% | 2026-08-18 | |
| CVE-2026-52607 | Reportico target_format parameter path traversal | 6.5CISA ADP v3.1 | 0.7% | 2026-08-18 | |
| CVE-2026-52606 | Reportico loadTemplate parameter reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-52481 | SJRC F11 SJ-GPS-PRO firmware tcp_actions function information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2026-08-18 | |
| CVE-2026-52480 | SJRC F11 SJ-GPS-PRO firmware inetd service missing authentication | 6.5CISA ADP v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-50578 | fbeta-GmbH ePA3-Service-OpenSource TLS certificate verification improper certificate validation | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-50577 | fbeta-GmbH ePA3-Service-OpenSource ePA Integration: AES-GCM nonce reuse | 7.4CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-50576 | fbeta-GmbH ePA3-Service-OpenSource ePA Integration: HTTP header injection in VAU Inner requests | 6.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-50575 | BetterDesk has a replay behavior vulnerability when devices are deleted | 7.7CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-50191 | 4gaBoards: Pre-account takeover via SSO Email Linkage | 8.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-50187 | ohmyzsh oh My Zsh: Arbitrary code execution in oh-my-zsh dotenv plugin via malicious .env files | 8.8CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-50186 | 4gaBoards: Path traversal leading to arbitrary file read and Deletion in Board Export | 8.8CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-50167 | Kurrier: Authenticated cross-user authorization bypass in Kurrier API | 5.3CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-50161 | Baresip libre WebSocket frame decoder integer overflow | 9.3CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-50143 | Actor MCP path authority injection leaks apify token | 8.1CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-50142 | libheif HEIF sequence parser integer overflow | 7.5CNA v3.1 | 0.7% | 2026-08-18 | Exploit codeFix |
| CVE-2026-50139 | patrickhener goshs share download limit check race condition | 5.9CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-50138 | goshs WebDAV listener improper access control | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-50126 | KNMI adaguc-server GeoJSON coordinate parser out-of-bounds read | 4.0CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-49500 | Dell Alienware Command Center (AWCC) least privilege violation | 6.0CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-49452 | WeasyPrint: CSS injection via Presentational Hints | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-49228 | givanz Vvveb product management insecure direct object reference | 8.8CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-49227 | givanz Vvveb comment management insecure direct object reference | 7.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-49226 | Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' posts | 8.3CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-49225 | givanz Vvveb product revision management insecure direct object reference | 8.3CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-49224 | givanz Vvveb post revision management insecure direct object reference | 8.3CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-49223 | givanz Vvveb product review management insecure direct object reference | 7.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-49222 | givanz Vvveb product question management insecure direct object reference | 7.6CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-49221 | givanz Vvveb digital asset management insecure direct object reference | 8.8CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-48798 | SSH.NET: ScpClient Recursive Download allows arbitrary file write | 7.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-48796 | CefSharp folder scheme handler path traversal | 5.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-48744 | Saleor channel update permission check improper authorization | 6.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-48508 | Lemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission | 8.8CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-47721 | frangoteam FUXA scheduler API missing authorization | 6.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-47720 | FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString | 5.3CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-47719 | FUXA: Unauthenticated SSRF | 8.2CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-47699 | Confidential Containers Guest Components image-rs hardlink fallback path traversal | 6.4CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-47630 | NVIDIA Triton Inference Server absolute path traversal | 5.5CNA v3.1 | 0.2% | 2026-08-18 | Exploit codeFix |
| CVE-2026-47629 | NVIDIA Triton Inference Server improper input validation | 7.5CNA v3.1 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-47628 | NVIDIA Triton Inference Server resource exhaustion | 7.5CNA v3.1 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-47627 | NVIDIA Triton Inference Server path traversal | 9.8CNA v3.1 | 0.7% | 2026-08-18 | Exploit codeFix |
| CVE-2026-47606 | NVIDIA Triton Inference Server absolute path traversal | 6.5CNA v3.1 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-47245 | MyBB: Buddy list corruption | 4.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-46482 | MyBB: Security Question insufficient validation | 5.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-45734 | MyBB: Default CAPTCHA missing invalidation | 5.3CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-45733 | Trilium: Stored XSS in note icon rendering leads to remote code execution in Electron desktop app | 8.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-45532 | DataEase has a path traversal | 8.7CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-45129 | MyBB: ACP Recovery Codes CSRF | 4.6CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-45128 | MyBB: ACP Users View Manager default CSRF | 3.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-45127 | MyBB: ACP Mass Mail draft resend CSRF | 3.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-45126 | MyBB: ACP Questions state CSRF | 3.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-45125 | MyBB: Email user CRLF injection | 5.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-45124 | MyBB: Mod CP report resolution missing authorization | 4.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-45123 | MyBB remote request IPv6 handling server-side request forgery | 4.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-45122 | MyBB: Insufficient permission check for calendar event move | 4.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-45121 | MyBB: Insufficient permission check for calendar select | 4.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-45120 | MyBB: Insufficient authorization for private calendar events | 5.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-45119 | MyBB: ACP UTF-8 Conversion CSRF | 4.6CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-45118 | MyBB: Contact page reflected XSS | 9.3CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-45117 | MyBB: Installer database configuration RCE | 9.8CNA v3.1 | 1.1% | 2026-08-18 | Fix |
| CVE-2026-45116 | MyBB: Profile field type confusion XSS | 8.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-45115 | MyBB: Buddy/ignore list username XSS | 8.7CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-44472 | Saleor: Account pre-hijacking vulnerability due to unverified anonymous order merge | 8.1CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-43971 | ninenines cowlib improper output encoding | 6.3CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-41921 | Koha stored XSS via Purchase Suggestion handler | 5.1CNA v4.0 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-34884 | Apache SkyWalking MCP: SSRF | 9.8CISA ADP v3.1 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-32657 | Dell AppSync symlink following | 7.3CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-32553 | OttoKit WordPress plugin server side request forgery (SSRF) | 7.2CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-32549 | ThumbPress WordPress plugin broken access control | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-32547 | BP Better Messages WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-32481 | Ezoic WordPress plugin broken authentication | 7.5CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-32474 | Templatiq WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2026-08-18 | |
| CVE-2026-32473 | PDF Smart Viewer for Elementor WordPress plugin server side request forgery (SSRF) | 7.2CNA v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-32472 | Online Contact Widget WordPress plugin broken access control | 7.5CNA v3.1 | 0.4% | 2026-08-18 | |
| CVE-2026-32470 | FundEngine WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.6% | 2026-08-18 | Fix |
| CVE-2026-32468 | Duitku Payment Gateway WordPress plugin sensitive data exposure | 7.5CNA v3.1 | 0.4% | 2026-08-18 | |
| CVE-2026-32467 | Grab WeChat Articles server-side request forgery | 6.0CNA v3.1 | 0.2% | 2026-08-18 | |
| CVE-2026-32466 | Gravity Forms Bookings premium WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2026-08-18 | |
| CVE-2026-32465 | Essential Real Estate WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.5% | 2026-08-18 | |
| CVE-2026-32464 | Theme Test Drive WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.5% | 2026-08-18 | |
| CVE-2026-32463 | Sync Post With Other Site WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2026-08-18 | |
| CVE-2026-32444 | Cwicly WordPress plugin remote code execution (RCE) | 9.9CNA v3.1 | 0.8% | 2026-08-18 | |
| CVE-2026-32333 | Mayosis Core WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-30250 | Beta Systems Software AG ANOW! Automate user documentation field cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2026-08-18 | |
| CVE-2026-28571 | FormyChat WordPress plugin broken access control | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-28570 | Vavo Core WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.5% | 2026-08-18 | |
| CVE-2026-28569 | SSL Zen WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-28568 | Quill Forms WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-28567 | WP Sort Order WordPress plugin broken access control | 7.5CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-28192 | Piotnet Addons For Elementor Pro WordPress plugin arbitrary file upload | 9.6CNA v3.1 | 0.4% | 2026-08-18 | |
| CVE-2026-28191 | The Grid WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-27365 | PublishPress Series WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-24301 | Microsoft CoPilot information disclosure | 8.8CNA v3.1 | 4.1% | 2026-08-18 | Emerging ThreatsFix |
| CVE-2026-24185 | NVIDIA NVOS authentication bypass | 7.1CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-24184 | NVIDIA Cumulus Linux GA buffer overflow | 7.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-24183 | NVIDIA Cumulus Linux GA execution with unnecessary privileges | 7.8CNA v3.1 | 0.1% | 2026-08-18 | Fix |
| CVE-2026-23938 | Zabbix server DoS via JavaScript preprocessing or script items | 2.1CNA v4.0 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-23937 | Host PSK extraction in Zabbix API | 6.0CNA v4.0 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-23935 | Zabbix use-after-free read in script item/preprocessing HttpRequest body | 6.8CNA v4.0 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-23934 | Zabbix frontend DoS via the validate.api.exists action | 5.1CNA v4.0 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-23933 | Hard-coded session key in Zabbix | 7.7CNA v4.0 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-23931 | Zabbix frontend plaintext macro value enumeration via the validatate.api.exists action | 5.3CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-23930 | Zabbix frontend DoS via the popup.testtriggerexpr action | 5.3CNA v4.0 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-23929 | Zabbix prototype pollution leading to stored XSS | 8.5CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-23922 | Zabbix Email media OAuth secret leak to Super Admin | 2.1CNA v4.0 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-21584 | Atlassian Bamboo Data Center improper authorization | 7.6CNA v4.0 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-21582 | Atlassian Crowd Data Center improper authentication | 8.8CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-21580 | Atlassian Confluence Data Center cross-site scripting | 8.6CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-19869 | neo4j graphql privilege escalation via Dropped Field-Level @authentication | 7.6CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-19671 | Improper handling of highly compressed data (data amplification) in CISA Malcolm | 7.1CNA v4.0 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-19670 | Incorrect authorization in CISA Malcolm | 5.3CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-19608 | Red Hat Keycloak group policy provider improper authorization | 5.3CNA v3.1 | 0.3% | 2026-08-18 | |
| CVE-2026-19501 | SureForms CSV export CSV injection | 8.8CISA ADP v3.1 | 0.6% | 2026-08-18 | Exploit code |
| CVE-2026-19500 | SureForms contains an uncontrolled resource consumption | 7.5CISA ADP v3.1 | 0.6% | 2026-08-18 | Exploit codeFix |
| CVE-2026-19447 | Stored XSS in FileOrbis Informatics's FileOrbis | 5.4CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-18963 | Red Hat build of Keycloak keycloak-services: Keycloak-services: Unauthenticated account takeover | 9.1CNA v3.1 | 6.4% | 2026-08-18 | Reported exploitedNucleiExploit codeFix |
| CVE-2026-18929 | Resource exhaustion in Carbone | 6.9CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-18751 | Citrix WorkSpace App for Mac Security Bulletin for | 5.2CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-18534 | The Browser Company Arc Search address bar spoofing | 7.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-18504 | fastify vulnerable to schema validation bypass via root primitive coercion mismatch | 5.4CNA v3.1 | 0.3% | 2026-08-18 | Exploit codeFix |
| CVE-2026-17106 | Tar extraction in moby/go-archive can write outside the destination directory via link following | 7.1CNA v4.0 | 0.4% | 2026-08-18 | Exploit codeFix |
| CVE-2026-17084 | Python CPython stringprep.map_table_b2 deviates from RFC 3454 Table B.2 | 6.0CNA v4.0 | 0.7% | 2026-08-18 | Fix |
| CVE-2026-16732 | fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count | 6.1CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-16309 | IDOR in Netiket Information Technologies' EdoWEB | 5.3CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-15806 | Python CPython urllib HTTPPasswordMgr cleartext transmission of sensitive information | 6.0CNA v4.0 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-15748 | Forminator Forms WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 6.1% | 2026-08-18 | Reported exploitedExploit codeFix |
| CVE-2026-15585 | Path traversal in AKIN Software's Wolvox9 ERP | 7.5CNA v3.1 | 0.5% | 2026-08-18 | Fix |
| CVE-2026-15571 | Red Hat Keycloak account-linking endpoint authentication bypass | 7.3CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-15371 | Velociraptor stored XSS in URL column types | 8.1CNA v3.1 | 0.4% | 2026-08-18 | Fix |
| CVE-2026-15316 | Denial of service via Oversized Encrypted Credential Input in TP-Link Tapo C200 | 7.1CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-15315 | TP-Link Tapo C120 and C200 login authentication verification module authentication bypass | 8.7CNA v4.0 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-12632 | Out-of-bounds read in Zephyr PTP message parsing from unvalidated message type | 6.5CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-12631 | Broken access-control denial in k_thread_join/k_thread_abort syscall validation in Zephyr kernel | 6.5CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-12564 | Red Hat Ansible Automation Platform HashiCorp Vault credential plugin server-side request forgery | 9.6CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-12520 | Stack buffer overflow and off-by-one writes in Zephyr HL7800 modem AT response handlers | 6.4CNA v3.1 | 0.3% | 2026-08-18 | Fix |
| CVE-2026-11801 | WPAdverts WordPress plugin missing authorization unauthenticated sensitive information disclosure | 7.5CNA v3.1 | 1.6% | 2026-08-18 | NucleiFix |
| CVE-2026-5224 | Sensitive data exposure in Kriptek Crypto's Cryptosim | 5.7CNA v3.1 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-1199 | Zabbix API and Frontend login lockout race condition | 6.9CNA v4.0 | 0.2% | 2026-08-18 | Fix |
| CVE-2026-75587 | Plaintext pre-auth secret exposure via Desktop App diagnostics report | 3.6CNA v3.1 | 0.1% | 2026-08-17 | Fix |
| CVE-2026-75531 | Stored cross-site scripting in URL Observables via Lookyloo Submission handler in Pandora | 7.0CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-75529 | Stored cross-site scripting via MIME-type confusion in PDF Downloads of Pandora | 6.9CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-75483 | powerlevel10k Control Character injection via package.json Version | 4.8CNA v4.0 | 0.2% | 2026-08-17 | |
| CVE-2026-75482 | SWE-agent Trajectory Inspector path traversal File Disclosure | 8.7CNA v4.0 | 0.8% | 2026-08-17 | |
| CVE-2026-75481 | SkyPilot authentication bypass via Service Account Role Escalation | 8.7CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-75480 | OpenViking Debug Vector Endpoints Multi-tenant data exposure | 7.1CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-75479 | JimuReport Unauthenticated Report Listing and Share token disclosure | 8.7CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-75111 | Evidently UI path traversal via Dataset Materialization Filename | 8.7CNA v4.0 | 0.6% | 2026-08-17 | |
| CVE-2026-75110 | MemOS authentication bypass via Unset INTERNAL_SERVICE_SECRET | 9.3CNA v4.0 | 0.7% | 2026-08-17 | |
| CVE-2026-75109 | Determined missing authorization Check on Generic Task endpoints | 7.1CNA v4.0 | 0.3% | 2026-08-17 | |
| CVE-2026-75108 | next-terminal Next Terminal Missing Per-Asset Authorization on portal endpoints | 5.3CNA v4.0 | 0.3% | 2026-08-17 | |
| CVE-2026-75106 | OpnForm Editable Submission Secret Derivation via Empty Hashids Salt | 9.3CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-75105 | phpIPAM Temporary Subnet Share information disclosure via Address parameter | 8.7CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-75104 | Hugging Face Transformers path traversal via Checkpoint Index | 6.8CNA v4.0 | 0.3% | 2026-08-17 | |
| CVE-2026-75103 | Crawlab missing authorization on Password Change endpoint allows account takeover | 8.7CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-75081 | Webkul Bagisto store behavioral workflow | 5.3CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-75080 | SourceCodester Class and Exam Timetabling System edit_subject1.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-75079 | SourceCodester Class and Exam Timetabling System edit_subject2.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-75078 | SourceCodester Class and Exam Timetabling System BSHRM1.php cross-site scripting | 5.3CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-75077 | SourceCodester Class and Exam Timetabling System BSCE2.php cross-site scripting | 5.3CNA v4.0 | 0.5% | 2026-08-17 | |
| CVE-2026-75060 | JetBrains PyCharm missing authentication | 8.4CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-75059 | JetBrains PyCharm cross-site scripting | 4.4CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-75058 | JetBrains IntelliJ IDEA XML external entity injection | 5.5CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-75057 | JetBrains IntelliJ IDEA sensitive information in log files | 6.2CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-75056 | JetBrains IntelliJ IDEA OS command injection | 7.8CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-75055 | JetBrains IntelliJ IDEA XML external entity injection | 5.5CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-75054 | JetBrains IntelliJ IDEA server-side request forgery | 6.3CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-75053 | JetBrains IntelliJ IDEA server-side request forgery | 5.4CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-75052 | JetBrains IntelliJ IDEA command injection | 3.6CNA v3.1 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-75051 | JetBrains YouTrack missing authorization | 8.1CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-75050 | JetBrains YouTrack resource exhaustion | 7.1CNA v3.1 | 1.1% | 2026-08-17 | Fix |
| CVE-2026-75049 | JetBrains YouTrack missing authorization | 6.5CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-75048 | JetBrains YouTrack cross-site scripting | 8.2CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-75047 | JetBrains YouTrack decompression bomb | 6.5CNA v3.1 | 1.2% | 2026-08-17 | Fix |
| CVE-2026-75046 | JetBrains YouTrack missing authorization | 4.3CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-75045 | JetBrains YouTrack authentication bypass | 9.1CNA v3.1 | 0.4% | 2026-08-17 | Exploit codeFix |
| CVE-2026-75044 | JetBrains YouTrack missing authorization | 8.1CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-75014 | SourceCodester Pet Grooming Management Software get_barcode_data.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-08-17 | |
| CVE-2026-75013 | TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereference | 7.1CNA v4.0 | 0.7% | 2026-08-17 | |
| CVE-2026-75012 | TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference | 7.1CNA v4.0 | 0.7% | 2026-08-17 | |
| CVE-2026-75011 | kylecui NetForensicMCP index.js execAsync command injection | 5.3CNA v4.0 | 1.8% | 2026-08-17 | |
| CVE-2026-75010 | Roundcube Webmail incorrect resource transfer | 4.3v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-75007 | Roundcube Webmail command injection | 8.8v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-75006 | Roundcube Webmail server-side request forgery | 5.8CNA v3.1 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-75004 | Roundcube Webmail command injection | 4.3CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-75003 | Roundcube Webmail incorrect resource transfer | 9.8v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-75002 | Roundcube Webmail command injection | 7.1CNA v3.1 | 2.3% | 2026-08-17 | Fix |
| CVE-2026-75000 | Roundcube Webmail incorrect resource transfer | 5.8CNA v3.1 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-74999 | Roundcube Webmail cross-site scripting | 5.4CNA v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-74998 | Roundcube Webmail cross-site scripting | 7.2CNA v3.1 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-74997 | Roundcube Webmail OS command injection | 8.8CNA v3.1 | 1.1% | 2026-08-17 | Fix |
| CVE-2026-74901 | openssl_encrypt authentication bypass via AES-CTR Fallback | 9.3CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-74900 | openssl_encrypt Weak Shared Secret via PQC Simulation Mode | 9.3CNA v4.0 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-74899 | openssl_encrypt sandbox escape via Type Hierarchy | 9.3CNA v4.0 | 0.8% | 2026-08-17 | Fix |
| CVE-2026-74896 | openssl_encrypt sandbox escape via Dunder Attribute Traversal | 9.3CNA v4.0 | 0.6% | 2026-08-17 | Fix |
| CVE-2026-74895 | openssl_encrypt plugin sandbox bypass via Process Isolation | 9.3CNA v4.0 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-74894 | openssl_encrypt authentication bypass via Bearer Token | 9.3CNA v4.0 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-74893 | openssl_encrypt JWT Token Forgery via hard-coded secrets | 8.7CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-74892 | openssl_encrypt hard-coded secret Key | 8.7CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-74891 | openssl_encrypt Hard-coded Database Credentials | 8.7CNA v4.0 | 0.5% | 2026-08-17 | Fix |
| CVE-2026-74890 | openssl_encrypt HMAC authentication bypass via Environment variable | 9.3CNA v4.0 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-74889 | openssl_encrypt Weak Key Derivation via HKDF | 9.3CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-74888 | openssl_encrypt Non-Standard PBKDF2 Key Derivation | 8.7CNA v4.0 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-74887 | openssl_encrypt Insecure Random Import in PQC module | 5.9NVD v3.1 | 0.3% | 2026-08-17 | Fix |
| CVE-2026-74886 | openssl_encrypt Plugin Import Guard Bypass | 9.3CNA v4.0 | 0.7% | 2026-08-17 | Fix |
| CVE-2026-74885 | openssl_encrypt Logging Bug and race condition | 9.3CNA v4.0 | 0.2% | 2026-08-17 | Fix |
| CVE-2026-74884 | openssl_encrypt path traversal via plugin_id | 8.7CNA v4.0 | 0.4% | 2026-08-17 | Fix |
| CVE-2026-74883 | openssl_encrypt sandbox bypass via pathlib and io | 8.7CNA v4.0 | 0.5% | 2026-08-17 | Fix |