CVE-2026 records published in September 2026
Page eight of 15: records 7,001 to 8,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2026-92045 | Mozilla Firefox sandbox escape due to incorrect boundary conditions in the WebRTC component | 9.6CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92044 | Mozilla Firefox information disclosure in the Networking: HTTP component | 7.5CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92043 | Mozilla Firefox and Thunderbird Audio/Video privilege escalation | 8.8CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-92042 | Mozilla Firefox race condition in the DOM: Content Processes component | 7.5CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-92041 | Mozilla Firefox mitigation bypass in the DOM: Networking component | 9.1CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92040 | Mozilla Firefox use-after-free in the JavaScript: WebAssembly component | 8.8CISA ADP v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-92039 | Mozilla Firefox mitigation bypass in the DOM: Notifications component | 6.3CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-92038 | Mozilla Firefox mitigation bypass in the Remote settings client component | 9.1CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92037 | Mozilla Firefox incorrect boundary conditions in the DOM: Animation component | 9.8CISA ADP v3.1 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-92036 | Mozilla Firefox incorrect boundary conditions in the Networking: HTTP component | 9.8CISA ADP v3.1 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-92035 | Mozilla Firefox sandbox escape due to incorrect boundary conditions in the Graphics component | 9.6CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92034 | Mozilla Firefox site isolation issue in the Graphics component | 9.1CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92033 | Mozilla privilege escalation in Firefox for Android | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92032 | Mozilla Firefox sandbox escape due to invalid pointer in the Graphics component | 9.6CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92031 | Mozilla Firefox information disclosure in the Graphics: ImageLib component | 6.5CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92030 | Mozilla Firefox Mitigation bypass in the DOM: Copy and Paste and Drag and Drop component | 5.4CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-92029 | Mozilla Firefox use-after-free in the SVG component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92028 | Mozilla Firefox use-after-free in the DOM: Core and HTML component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92027 | Mozilla Firefox use-after-free in the DOM: Streams component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92026 | Mozilla Firefox use-after-free in the Networking component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92025 | Mozilla Firefox use-after-free in the DOM: Navigation component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92024 | Mozilla Firefox use-after-free in the SVG component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92023 | Mozilla Firefox use-after-free in the XML component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92022 | Mozilla Firefox use-after-free in the DOM: HTML parser component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92021 | Mozilla Firefox use-after-free in the JavaScript Engine: JIT component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92020 | Mozilla Firefox and Thunderbird WebRender privilege escalation | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92019 | Mozilla Firefox mitigation bypass in the Remote settings client component | 8.1CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92018 | Mozilla Firefox sandbox escape in the DOM: Core and HTML component | 9.6CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92017 | Mozilla Firefox privilege escalation in the DOM: Service Workers component | 8.8CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-92016 | Mozilla Firefox use-after-free in the Disability Access APIs component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92015 | Mozilla Firefox privilege escalation in the WebExtensions component | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92014 | Mozilla Firefox privilege escalation due to incorrect boundary conditions in the Graphics component | 8.8CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-92013 | Mozilla Firefox and Thunderbird CanvasWebGL privilege escalation | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92012 | Mozilla Firefox and Thunderbird CanvasWebGL privilege escalation | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92011 | Mozilla Firefox and Thunderbird CanvasWebGL privilege escalation | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92010 | Mozilla Firefox and Thunderbird CanvasWebGL privilege escalation | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92009 | Mozilla Firefox and Thunderbird CanvasWebGL buffer overflow | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92008 | Mozilla Firefox and Thunderbird CanvasWebGL buffer overflow | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92007 | Mozilla Firefox and Thunderbird CanvasWebGL buffer overflow | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92006 | Mozilla Firefox and Thunderbird CanvasWebGL buffer overflow | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-92005 | Mozilla Firefox use-after-free in the Audio/Video: Web Codecs component | 5.3CISA ADP v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-92003 | MISP Unthrottled Authentication failure Log Writes Enable resource exhaustion | 6.9CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-92002 | MISP: Authentication failure logging suppressed during Redis unavailability | 5.1CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-92000 | adm-zip denial of service via Zero Declared Uncompressed Size | 8.7CNA v4.0 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-91998 | Casdoor Cross-Organization User Administration via /API/mcp | 9.4CNA v4.0 | 0.6% | 2026-09-15 | |
| CVE-2026-91997 | evolution-api Prometheus Metrics IP Allowlist Bypass | 6.9CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-91996 | lamp-cloud missing authentication for JVM Properties endpoint | 8.7CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-91995 | pig unverified password change via /register/password | 9.3CNA v4.0 | 0.9% | 2026-09-15 | Fix |
| CVE-2026-91994 | Semaphore UI missing authorization on GET and HEAD requests | 7.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-91993 | Jpom Workspace Isolation Bypass via /build/branch-list | 5.3CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-91992 | Tornado credential leak via Handle Reuse | 8.2CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91991 | Tornado Cookie attribute injection via Capitalized kwargs | 6.3CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91990 | Tornado Memory Amplification DoS via multipart | 8.7CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91989 | atomic-agents-stack path traversal via dashboard serve.py | 8.7CNA v4.0 | 1.3% | 2026-09-15 | Fix |
| CVE-2026-91988 | atomic-agents-stack remote code execution via HTTP MCP | 9.2CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91987 | atomic-agents-stack Cost Guardrail Bypass via Unknown Model | 7.1CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91986 | gitoxide gix-transport CR/LF/NUL injection | 5.3CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91985 | Vikunja privilege escalation via Link Share Hash | 8.7CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91984 | Vikunja Broken Object-Level Authorization via task-position | 5.3CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91983 | Vikunja API Token Scope Bypass via expand parameter | 5.3CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91982 | Vikunja TOTP secret disclosure via API | 5.3CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91981 | Vikunja User Enumeration via v2 API | 5.3CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91980 | vikunja Team Enumeration via Project Share | 5.3CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91979 | Vikunja denial of service via decompression bomb | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91973 | Vikunja authentication bypass via CalDAV BasicAuth | 8.7CNA v4.0 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-91972 | Vikunja authentication bypass via Unthrottled API | 8.7CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-91971 | Vikunja denial of service via Avatar upload | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91970 | Vikunja resource exhaustion via Planka Migration | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91969 | vikunja resource exhaustion via CSV Migration | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91968 | vikunja denial of service via unbounded filter recursion | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91967 | AVideo blind SSRF via getHeaderContentTypeFromURL | 5.3CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-91966 | AVideo unauthenticated SSRF via host header | 6.9CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91965 | WWBN AVideo broken access control via Live endpoints | 8.7CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-91964 | FreeRDP heap buffer overflow via RoutingToken | 8.7CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-91963 | FreeRDP uninitialized heap Memory Disclosure via urbdrc | 7.1CNA v4.0 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-91962 | FreeRDP integer overflow via audin Apple backends | 5.3CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91961 | FreeRDP denial of service via URBDRC | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91960 | FreeRDP integer overflow double free | 7.1CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91959 | FreeRDP buffer over-read via RTS Gateway | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91958 | FreeRDP heap buffer overflow via Monitor Index | 6.9CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91957 | FreeRDP use-after-free via smartcard worker | 2.3CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91956 | FreeRDP out-of-bounds read via URBDRC | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91955 | FreeRDP denial of service via Desktop Dimensions | 8.2CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-91954 | FreeRDP null pointer dereference via NSCodec | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91953 | FreeRDP heap buffer overflow via LB_LOAD_BALANCE_INFO | 7.1CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91952 | FreeRDP denial of service via pool_decode_rect | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91951 | FreeRDP out-of-bounds write via urbdrc | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91950 | FreeRDP out-of-bounds read via UINT32 Wraparound | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91949 | FreeRDP Protocol Negotiation Bypass | 9.2CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-91948 | FreeRDP out-of-bounds write via SHOW_PROTOCOL | 7.7CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-91947 | FreeRDP server use-after-free via DRDYNVC | 7.7CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91946 | FreeRDP information disclosure via RDPGFX ResetGraphics | 7.1CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91945 | FreeRDP out-of-bounds read via Smartcard ATR | 7.1CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-91944 | crawl4ai DOM-based XSS via Playground UI | 5.1CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91943 | Crawl4AI SSRF via PDFContentScrapingStrategy | 8.3CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91942 | crawl4ai cross-site scripting via innerHTML | 5.1CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91941 | Crawl4AI denial of service via PDFContentScrapingStrategy | 8.7CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91940 | crawl4ai arbitrary file write via PDFContentScrapingStrategy | 8.7CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91939 | Cotonti Comments Plugin PHP object injection via ci parameter | 9.3CNA v4.0 | 1.0% | 2026-09-15 | |
| CVE-2026-91938 | Flowise server-side request forgery via document loaders | 7.6CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91937 | Flowise NoSQL injection via sessionId | 8.7CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91936 | Flowise script injection via Docker Workflows | 8.3CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91935 | Flowise SSRF and API Key Exfiltration via Chat Model Nodes | 8.7CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91934 | Flowise remote code execution via SQL Database Chain | 8.7CNA v4.0 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-91933 | Flowise authorization bypass via openai-realtime | 7.6CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91932 | Flowise remote code execution via cwd parameter | 9.0CNA v4.0 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-91931 | Flowise remote code execution via Custom MCP npx | 9.0CNA v4.0 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-91930 | Flowise Cross-Tenant Organization Admin takeover | 7.7CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91929 | Flowise Cross-Tenant authorization bypass | 7.6CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91926 | Red Hat Enterprise Linux 8 gss-ntlmssp: Gss-ntlmssp: Memory leak in ntlm_decode_target_info | 3.7CNA v3.1 | 0.4% | 2026-09-15 | |
| CVE-2026-91925 | Polyaxon server-side template injection via Unsandboxed Jinja2 Engine | 8.7CNA v4.0 | 0.8% | 2026-09-15 | |
| CVE-2026-91924 | pgweb missing authorization on Direct Connect endpoint | 8.4CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-91923 | KubeSphere SSRF via git credential verification endpoint | 8.3CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-91922 | Steedos Platform reflected XSS via page render | 5.3CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-91859 | MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass | 5.3CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91857 | MISP: State-changing actions accessible via GET request enabling CSRF | 5.3CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91855 | Open5GS PFCP message handler.c denial of service | 6.9CNA v4.0 | 0.7% | 2026-09-15 | |
| CVE-2026-91854 | code-projects Record Management System reg.php cross-site scripting | 5.3CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-91853 | TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection | 5.3CNA v4.0 | 1.8% | 2026-09-15 | |
| CVE-2026-91851 | MISP dashboard template permission check incorrect authorization | 5.3CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91849 | WuzhiCMS Avatar upload index.php setAvatar unrestricted upload | 5.3CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-91848 | WuzhiCMS index.php getDataOfJson SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-91846 | MISP Collection Element Add missing authorization on Referenced Object UUID | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91842 | OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization | 2.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-91836 | OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors | 2.4CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91835 | OpenClaw ClawScan File Classifier static_scanner.go IsBinaryFile interpretation conflict | 2.4CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91826 | Samsung Open Source rlottie stack-based buffer overflow | 4.4CNA v3.1 | 0.1% | 2026-09-15 | |
| CVE-2026-91825 | MISP event sharing group missing authorization | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91819 | MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponent | 6.9CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91786 | GNOME Shell remote search icon rendering out-of-bounds read | 6.1CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-91782 | GNU Binutils x86 dynamic relocation allocation null pointer dereference | 4.8CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91781 | GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference | 4.8CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91780 | GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference | 4.8CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91779 | GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference | 4.8CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91778 | Octopus Deploy Octopus Server incorrect authorization | 7.2CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91774 | Yao missing authorization via OpenAPI team endpoint | 5.3CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-91773 | charmbracelet soft-serve Soft Serve information disclosure via LFS Locks | 5.3CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91772 | Halo open redirect via Unvalidated URI parameter | 5.3CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-91771 | Weights and Biases wandb path traversal via File Download | 8.7CNA v4.0 | 1.2% | 2026-09-15 | Fix |
| CVE-2026-91770 | IceHRM broken access control via Employee ID | 7.1CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91752 | GNU libextractor stack overflow via OLE2 | 8.7CNA v4.0 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-91751 | Flextype CMS path traversal via Entries REST API | 7.2CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-91750 | WeKnora SSRF via Unvalidated HTTP Redirects | 7.1CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91749 | Google Chrome Workers use-after-free | 9.6CISA ADP v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91748 | Google Chrome extensions race condition | 8.3CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91747 | Google Chrome Skia use-after-free | 3.1CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91746 | Google Chrome Compositing integer overflow | 4.3CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91745 | Google Chrome V8 use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91744 | Google Chrome PlatformIntegration race condition | 5.3CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91743 | Google Chrome Core race condition | 8.3CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91742 | Google Chrome PriceTracking confused deputy | 4.8CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91741 | Google Chrome CacheStorage type confusion | 8.8CISA ADP v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91740 | Google Chrome Skia uninitialized resource use | 4.3CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91739 | Google Chrome Transactions Platform missing authorization | 4.2CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91738 | Google Chrome ANGLE improper input validation | 9.6CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91737 | Google Chrome PDF use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91736 | Google Chrome DOM use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91735 | Google Chrome WebUI incorrect authorization | 8.3CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91734 | Google Chrome Core incorrect authorization | 7.4CISA ADP v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-91733 | Google Chrome improper check for exceptional conditions | 8.3CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91732 | Google Chrome AppManifest missing authorization | 8.1v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91731 | Google Chrome Compositing type confusion | 8.8CISA ADP v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91730 | Google Chrome GetUserMedia incomplete cleanup | 3.1CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91729 | Google Chrome DigitalCredentials use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91728 | Google Chrome V8 integer overflow | 9.6CISA ADP v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91727 | Google Chrome incorrectly resolved name or reference | 8.1CISA ADP v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-91726 | Google Android WebGL in Google Chrome on out-of-bounds read | 4.7CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91725 | Google Chrome CSS observable discrepancy | 5.3CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91724 | Google Chrome Input use-after-free | 8.3CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91723 | Google Chrome WebAppInstalls race condition | 3.1NVD v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91722 | Google Chrome Input use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91721 | Google Chrome Internals use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91720 | Google Chrome ANGLE uninitialized resource use | 4.7CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91719 | Google Chrome XML code injection | 8.1v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91718 | Google Chrome Core use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91717 | Google Android missing authorization | 5.1CISA ADP v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-91716 | Google Chrome Auth use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91715 | Google Chrome ServiceWorker type confusion | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91714 | Google Chrome Fonts observable discrepancy | 5.3CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91713 | Google Chrome Browser missing authorization | 4.2CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91712 | Google Chrome extensions race condition | 8.3CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91711 | Google Chrome ServiceWorker out-of-bounds write | 8.8CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91710 | Google Chrome WebAppInstalls use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-91709 | Google Chrome ServiceWorker type confusion | 8.8CISA ADP v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-91708 | Google Chrome Network race condition | 3.1CISA ADP v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91091 | GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption | 5.3CNA v4.0 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-91090 | GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow | 2.4CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91089 | GPAC base_scenegraph.c gf_node_get_name_and_id use-after-free | 5.3CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-91088 | GPAC URL url.c gf_url_concatenate_ex heap-based overflow | 2.4CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-91087 | GPAC Compositor media_object.c gf_mo_get_od_id use-after-free | 6.9CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-91086 | GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow | 5.3CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-91005 | SourceCodester Online Faculty Clearance System profile picture unrestricted file upload | 5.3CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-91004 | SourceCodester Online Faculty Clearance System delete_faculty1.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-91003 | D-Link DI-8300 CGI service rzgl.asp rzgl_asp stack-based overflow | 9.4CNA v4.0 | 1.0% | 2026-09-15 | |
| CVE-2026-91002 | Stamparm Maltrail Blacklist endpoint httpd.py _blacklist missing authentication | 6.9CNA v4.0 | 0.8% | 2026-09-15 | Fix |
| CVE-2026-91001 | D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow | 9.4CNA v4.0 | 0.9% | 2026-09-15 | |
| CVE-2026-90971 | Devolutions Server VMware synchronization feature server-side request forgery | 6.5CISA ADP v3.1 | 0.3% | 2026-09-15 | |
| CVE-2026-90969 | Devolutions Server vault entry listing feature improper access control | 6.5CISA ADP v3.1 | 0.3% | 2026-09-15 | |
| CVE-2026-90881 | D-Link DIR-882 CGI Binary dllog.cgi main information disclosure | 6.9CNA v4.0 | 0.8% | 2026-09-15 | |
| CVE-2026-90880 | D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection | 5.3CNA v4.0 | 1.9% | 2026-09-15 | |
| CVE-2026-90879 | zyx0814 FilePress Publish search.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90878 | Vllm-project vLLM Jinja Template Rendering completions resource consumption | 5.3CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-90877 | SourceCodester Online Faculty Clearance System update_requirement_status.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90876 | SourceCodester Online Faculty Clearance System delete_requirement.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90858 | subhajitkhan online-clinic-management-system adminappview.php session_start authorization | 6.9CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-90857 | SourceCodester College Notes Gallery Management System profile unrestricted file upload | 5.3CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90856 | SourceCodester College Notes Gallery Management System registration flow privilege escalation | 6.9CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-90855 | SourceCodester/katojkalemba Online Food Ordering System order.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90854 | SourceCodester/katojkalemba Online Food Ordering System category-foods.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90852 | luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use-after-free | 6.9CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-90851 | PHPGurukul Hostel Management System checklogin.php access control | 5.3CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90850 | PHPGurukul Hostel Management System manage-students.php cross-site scripting | 4.8CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90849 | SourceCodester College Notes Gallery Management System login.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90848 | Governikus AusweisApp StartPAOSResponse cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-90847 | EFM ipTIME C200E System Setup iux_set.cgi os command injection | 9.4CNA v4.0 | 3.4% | 2026-09-15 | |
| CVE-2026-90846 | PHPGurukul Daily Expense Tracker System forgot-password.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90845 | PHPGurukul Daily Expense Tracker System sidebar.php cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-90844 | PHPGurukul Daily Expense Tracker System Login index.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-90843 | SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection | 6.9CNA v4.0 | 2.2% | 2026-09-15 | |
| CVE-2026-90711 | proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet | 9.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-90650 | MotoPress Hotel Booking WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-90439 | F5 NGINX Plus and NGINX Open Source HTTP/3 module heap-based buffer overflow | 6.9CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-89308 | Arbitrary command execution in TrxTimeATTENDANCE | 9.3CNA v4.0 | 2.1% | 2026-09-15 | Fix |
| CVE-2026-89307 | HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme | 5.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-89141 | AI Engine WordPress plugin insecure direct object reference | 6.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-89040 | Tencent Mass Service Engine in Cluster (MSEC) path traversal | 9.3CNA v4.0 | 1.1% | 2026-09-15 | |
| CVE-2026-89027 | miniOrange JWT Authentication for WP REST APIs authentication method selection authentication bypass | 6.9CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-89026 | Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate | 9.3CNA v4.0 | 0.7% | 2026-09-15 | Reported exploitedNucleiExploit code |
| CVE-2026-89025 | Hirschmann HiOS Switch Platform DoS via Malformed HTTP request | 8.7CNA v4.0 | 0.8% | 2026-09-15 | Fix |
| CVE-2026-89022 | BookStack authentication bypass via Social Login Provider Confusion | 9.1CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-88975 | Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE | 7.5CNA v3.1 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-88922 | HashiCorp go-getter archive decompression privilege escalation | 6.7CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-88765 | Improper neutralization of special elements used in a command (command injection) in GitLab | 8.5CNA v3.1 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-88743 | Bacularis director tags stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-09-15 | |
| CVE-2026-88742 | Bacularis client address field stored cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2026-09-15 | |
| CVE-2026-88621 | OneNav file upload handler arbitrary file deletion | 2.7CISA ADP v3.1 | 0.3% | 2026-09-15 | |
| CVE-2026-88620 | SmartAdmin employee query endpoint missing authorization | 4.3CISA ADP v3.1 | 0.3% | 2026-09-15 | |
| CVE-2026-88619 | 1024-lab SmartAdmin scheduled-job management module missing authorization | 8.1CISA ADP v3.1 | 0.4% | 2026-09-15 | |
| CVE-2026-88618 | 1024-lab SmartAdmin file upload feature stored cross-site scripting | 6.5CISA ADP v3.1 | 0.3% | 2026-09-15 | |
| CVE-2026-88617 | SmartAdmin configuration query endpoint privilege escalation | 9.8CISA ADP v3.1 | 0.6% | 2026-09-15 | |
| CVE-2026-88616 | RuoYi-Vue-Plus workflow task completion incorrect authorization | 8.8CISA ADP v3.1 | 0.7% | 2026-09-15 | |
| CVE-2026-88262 | bizwell xClick insufficient session expiration | 8.7CNA v4.0 | 0.6% | 2026-09-15 | |
| CVE-2026-88261 | bizwell xClick improper input validation | 5.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-88065 | `tts-be` application has a broken access control | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87793 | Reflected XSS in WordPress theme design-scuole-wordpress-theme | 5.1CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-87792 | Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme | 8.7CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-87791 | Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme | 8.7CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-87289 | Oracle Helidon helidon-webserver-static-content component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87288 | Oracle GraalVM Compiler component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87287 | Oracle GraalVM Compiler component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87286 | Oracle GraalVM Compiler component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87285 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87284 | Oracle VM VirtualBox Core component denial of service | 3.2CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87283 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87282 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87281 | Oracle VM VirtualBox Core component information disclosure | 3.2CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87280 | Oracle VM VirtualBox Core component denial of service | 4.2CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-87279 | Oracle VM VirtualBox Core component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87278 | Oracle VM VirtualBox Core component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87277 | Oracle VM VirtualBox Core component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87276 | Oracle VM VirtualBox Core component takeover | 7.5CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-87275 | Oracle VM VirtualBox Core component denial of service | 4.6CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87274 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-87273 | Oracle VM VirtualBox Core component takeover | 8.6CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87272 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87271 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87270 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87269 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87268 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87267 | Oracle VM VirtualBox Core component denial of service | 5.3CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87266 | Oracle Supply Chain Agile PLM Application Server component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87265 | Oracle E-Business Suite Purchasing Other issue component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87264 | Oracle PeopleSoft Enterprise PeopleTools Integration Broker component unauthorized data modification | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87262 | Oracle Agile Engineering Data Management unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87261 | Oracle Agile Engineering Data Management unauthorized data access | 7.3CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-87260 | Oracle Agile Engineering Data Management unauthorized data access | 7.3CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87259 | Oracle Agile Engineering Data Management unauthorized data access | 8.4CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-87258 | Oracle Supply Chain Agile PLM Folders, files & Attachments component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87257 | Oracle Supply Chain Agile PLM SDK component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87256 | Oracle Supply Chain Agile PLM Application Server component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87254 | Oracle Supply Chain Agile PLM Folders, files & Attachments component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87253 | Oracle Supply Chain Agile PLM Web client component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87252 | Oracle Supply Chain Agile PLM Application Server component unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87250 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87249 | Oracle Hyperion Financial Management Security component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87248 | Oracle Hyperion Financial Management Security component takeover | 6.7CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87247 | Oracle Hyperion Financial Management Security component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87246 | Oracle Hyperion Financial Management Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87245 | Oracle Hyperion Financial Management Security component takeover | 8.0CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87244 | Oracle Hyperion Financial Management Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87243 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.0CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87242 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87241 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87240 | Oracle Hyperion Financial Management Security component takeover | 7.0CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-87239 | Oracle Hyperion Financial Management Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87238 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87237 | Oracle Hyperion Financial Management Security component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87236 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87235 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87234 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87233 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87232 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87231 | Oracle Hyperion Financial Management Security component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87230 | Oracle Hyperion Financial Management Security component unauthorized data access | 10.0CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87229 | Oracle Hyperion Financial Management Security component unauthorized data modification | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87228 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87227 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87226 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87225 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87224 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87223 | Oracle Hyperion Financial Management Security component unauthorized data modification | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87222 | Oracle Hyperion Financial Management Security component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87221 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87220 | Oracle Hyperion Financial Management Security component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87219 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.4CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87218 | Oracle Hyperion Financial Management Security component unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87217 | Oracle Hyperion Financial Management Security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87216 | Oracle Hyperion Financial Management Security component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87215 | Oracle Hyperion Financial Management Security component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87214 | Oracle Hyperion Financial Management Security component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87213 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87212 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.4CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87211 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87210 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87209 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87208 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87207 | Oracle Hyperion Financial Management Security component takeover | 7.2CNA v3.1 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-87206 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87205 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87204 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87203 | Oracle Hyperion Financial Management Security component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87202 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87201 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87200 | Oracle Hyperion Financial Management Security component unauthorized data modification | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87199 | Oracle Hyperion Financial Management Security component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87198 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87197 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87196 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87195 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87194 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87193 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87192 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87191 | Oracle Hyperion Financial Management Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87190 | Oracle Hyperion Financial Management Security component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87189 | Oracle Hyperion Financial Management Security component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87188 | Oracle Hyperion Financial Management Security component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87187 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87186 | Oracle Hyperion Financial Management Security component takeover | 9.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87185 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87184 | Oracle Hyperion Financial Management Security component takeover | 9.8CNA v3.1 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-87183 | Oracle Hyperion Financial Management Security component takeover | 7.7CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87182 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87181 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87180 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87179 | Oracle Hyperion Financial Management Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87178 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87177 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87176 | Oracle Hyperion Financial Management Security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87175 | Oracle Hyperion Financial Management Security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87174 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87173 | Oracle Hyperion Financial Management Security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87172 | Oracle Hyperion Financial Management Security component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87171 | Oracle Hyperion Financial Management Security component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87170 | Oracle Hyperion Financial Management Security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87169 | Oracle Contract Lifecycle Management for Public Sector unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87168 | Oracle E-Business Suite Purchasing G-Invoicing component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87167 | Oracle E-Business Suite Purchasing G-Invoicing component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87166 | Oracle E-Business Suite Purchasing Other issue component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87165 | Oracle Contract Lifecycle Management for Public Sector ECC For Award and IDV component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87164 | Oracle Financial Services Applications Banking Branch Reports component takeover | 8.0CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87163 | Oracle E-Business Suite Purchasing Other issue component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87162 | Oracle Contract Lifecycle Management for Public Sector Award/PO component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87161 | Oracle E-Business Suite HRMS (India) Internal Operations component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87160 | Oracle E-Business Suite HRMS (India) Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87159 | Oracle E-Business Suite HRMS (India) Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87158 | Oracle E-Business Suite Order Management unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87157 | Oracle E-Business Suite Order Management Product Diagnostic tools component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87156 | Oracle E-Business Suite Product Hub Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87155 | Oracle E-Business Suite Product Hub Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87154 | Oracle E-Business Suite Product Hub Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87153 | Oracle E-Business Suite Product Hub Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87152 | Oracle E-Business Suite Installed Base Create Item Instance component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87151 | Oracle E-Business Suite Bills of Material Setup Workbench component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87150 | Oracle E-Business Suite Bills of Material Setup Workbench component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87149 | Oracle Contract Lifecycle Management for Public Sector Award/PO component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87148 | Oracle Hyperion Data Relationship Management Access and security component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87147 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87146 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87145 | Oracle Hyperion Data Relationship Management unauthorized data modification | 7.3CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87144 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87143 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87142 | Oracle Hyperion Data Relationship Management unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87141 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87140 | Oracle Hyperion Data Relationship Management Access and security component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87139 | Oracle Hyperion Data Relationship Management Access and security component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87138 | Oracle Hyperion Data Relationship Management Access and security component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-87137 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87136 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87135 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87134 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87133 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87132 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.6CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-87131 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87130 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-87129 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87128 | Oracle Hyperion Data Relationship Management Access and security component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87127 | Oracle E-Business Suite Purchasing G-Invoicing component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87126 | Oracle E-Business Suite Report Manager Reports Security component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87125 | Oracle E-Business Suite Financials for Asia/Pacific unauthorized data access | 8.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-87124 | Oracle E-Business Suite iRecruitment Internal Operations component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-86818 | fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization | 4.8CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-86701 | NTT DOCOMO BUSINESS ManabiPocket for Parents improper export of Android application components | 1.8CNA v4.0 | 0.1% | 2026-09-15 | |
| CVE-2026-86472 | fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets | 4.8CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-85893 | Microsoft Edge (Chromium-based) elevation of privilege | 8.8CNA v3.1 | 0.8% | 2026-09-15 | Fix |
| CVE-2026-85657 | PublishPress Authors author profile fields stored cross-site scripting | 5.4CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-85575 | ShopEngine Elementor WooCommerce Builder Addon WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-85234 | tftp-hpa in.tftpd remap engine out-of-bounds read | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-85013 | Environment Modules bash completion OS command injection | 7.3CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-84850 | Devolutions Server improper certificate validation | 4.8CISA ADP v3.1 | 0.1% | 2026-09-15 | |
| CVE-2026-84048 | Joomla extension joomgalleryfriends.net unauthenticated arbitrary file upload | 6.3CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-83491 | Oracle E-Business Suite iRecruitment Internal Operations component unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83490 | Oracle E-Business Suite iRecruitment Internal Operations component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83489 | Oracle Financial Services Applications Banking Origination takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83488 | Oracle Helidon helidon-microprofile-security component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83487 | Oracle E-Business Suite Product Hub Item Catalog component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83486 | Oracle E-Business Suite Product Hub Item Catalog component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83485 | Oracle E-Business Suite Product Hub Item Catalog component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83484 | Oracle US Federal Human Resources Internal Operations component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83483 | Oracle E-Business Suite Advanced Benefits Self-serv What-if Analysis component takeover | 8.0CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83482 | Oracle E-Business Suite Contracts Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83481 | Oracle E-Business Suite Contracts Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83480 | Oracle Helidon WebSocket component denial of service | 5.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83479 | Oracle E-Business Suite Contracts Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83477 | Oracle E-Business Suite Work in Process Workbenches component unauthorized data access | 8.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83465 | Oracle E-Business Suite Mobile Application Server unauthorized data modification | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83464 | Oracle E-Business Suite Mobile Application Server MWA Terminal Server component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83463 | Oracle E-Business Suite Mobile Application Server MWA Terminal Server component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83462 | Oracle E-Business Suite Mobile Application Server MWA Terminal Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83461 | Oracle E-Business Suite Mobile Application Server unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83460 | Oracle Helidon LRA component unauthorized data modification | 6.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83459 | Oracle Helidon helidon-media-multipart component denial of service | 5.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83458 | Oracle Helidon JSON component denial of service | 5.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83457 | Oracle E-Business Suite Demand Signal Repository unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83456 | Oracle E-Business Suite Demand Signal Repository Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83455 | Oracle E-Business Suite Demand Signal Repository unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83454 | Oracle Document Management and Collaboration Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83453 | Oracle Document Management and Collaboration Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83452 | Oracle Document Management and Collaboration Internal Operations component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83451 | Oracle E-Business Suite Product Workbench Internal Operations component takeover | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83450 | Oracle E-Business Suite Bills of Material Setup Workbench component takeover | 8.0CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83449 | Oracle E-Business Suite Bills of Material Internal Operations component unauthorized data access | 8.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83448 | Oracle E-Business Suite Bills of Material Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83447 | Oracle E-Business Suite Bills of Material Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83446 | Oracle E-Business Suite Financials Common Modules unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83445 | Oracle Complex Maintenance, Repair and Overhaul Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83444 | Oracle E-Business Suite Product Hub Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83443 | Oracle E-Business Suite Assets Internal Operations component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83442 | Oracle E-Business Suite Product Hub Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83441 | Oracle E-Business Suite Product Hub Internal Operations component unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83440 | Oracle E-Business Suite Product Hub Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83439 | Oracle Helidon helidon-security-providers-idcs-mapper component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83438 | Oracle E-Business Suite Engineering Internal Operations component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83437 | Oracle E-Business Suite Engineering Change Management component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83436 | Oracle E-Business Suite Depot Repair Recall Management component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83435 | Oracle E-Business Suite Bills of Material Internal Operations component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83434 | Oracle E-Business Suite Product Workbench Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83433 | Oracle E-Business Suite Depot Repair Depot Repair Diagnostics component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83432 | Oracle E-Business Suite Depot Repair Estimate and Actual Charges component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83431 | Oracle E-Business Suite Product Workbench WebUI component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83430 | Oracle E-Business Suite Product Workbench Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83429 | Oracle E-Business Suite Demand Signal Repository unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83428 | Oracle E-Business Suite Demand Signal Repository unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83425 | Oracle Complex Maintenance, Repair and Overhaul unauthorized data access | 8.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83424 | Oracle JDeveloper Oracle JDeveloper component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83423 | Oracle JDeveloper Security Framework component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83422 | Oracle Identity Manager OIM Legacy UI component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83420 | Oracle PeopleSoft Enterprise FIN Engineering Brazil takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83419 | Oracle Communications Cloud Native Core Security Edge Protection Proxy information disclosure | 5.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83418 | Oracle Communications Cloud Native Core Security Edge Protection Proxy unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83417 | Oracle Communications Cloud Native Core Security Edge Protection Proxy unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83416 | Oracle Coherence Core component denial of service | 4.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83415 | Oracle Coherence Core component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83414 | Oracle Coherence Core component information disclosure | 2.5CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83413 | Oracle Coherence Core component unauthorized data modification | 1.9CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83412 | Oracle Coherence Core component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83411 | Oracle Coherence Core component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83410 | Oracle Coherence Core component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83408 | Oracle GraalVM for JDK, Oracle GraalVM Compiler component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83369 | Oracle Access Manager Access SDK component denial of service | 3.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83368 | Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM unauthorized data access | 7.0CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83357 | Oracle GraalVM for JDK, Oracle GraalVM Compiler component takeover | 8.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83356 | Oracle Enterprise Command Center Framework Security component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83355 | Oracle Enterprise Manager for Fusion Middleware Metrics component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83354 | Oracle Coherence Core component unauthorized data access | 6.3CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83353 | Oracle WebCenter Content Server component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83352 | Oracle E-Business Suite XML Gateway Install component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83351 | Oracle Database Server improper privilege management | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83350 | Oracle Database Server crash | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83349 | Oracle Database Server crash | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83348 | Oracle Database Server improper privilege management | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83347 | Oracle Database Server resource exhaustion | 6.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83346 | Oracle Fusion Middleware Control Framework component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83345 | Oracle E-Business Suite XML Gateway Install component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83344 | Oracle Identity Manager Connector Database Application Table component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83343 | Oracle Utilities Network Management System Wide component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83342 | Oracle Utilities Network Management System Wide component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83341 | Oracle E-Business Suite Applications Manager unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83340 | Oracle Identity Manager Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83339 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83338 | Oracle E-Business Suite Applications Manager Oracle Diagnostics Interfaces component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83337 | Oracle Middleware Common Libraries and Tools Remote Diagnostic agent component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83336 | Oracle Business Intelligence Enterprise Edition Analytics Server component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83335 | Oracle Business Intelligence Enterprise Edition Analytics Server component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83334 | Oracle Web Services Manager Web Services Security component unauthorized data access | 7.4CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83333 | Oracle Database Server crash | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83332 | Oracle E-Business Suite Applications Framework Personalization component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83331 | Oracle E-Business Suite Applications Framework Personalization component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83330 | Oracle Helidon WebSocket component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83329 | Oracle E-Business Suite Applications Framework Personalization component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83328 | Oracle E-Business Suite Applications Framework Personalization component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83327 | Oracle E-Business Suite Applications Framework Personalization component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83326 | Oracle Siebel CRM Integration Open Integration component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83325 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83324 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 7.1CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83323 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 7.5CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83322 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83321 | Oracle Business Intelligence Enterprise Edition Analytics Actions component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83320 | Oracle BI Publisher Administration component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83319 | Oracle BI Publisher Web Service API component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83318 | Oracle BI Publisher Administration component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83317 | Oracle Business Intelligence Enterprise Edition Installation component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83316 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 7.0CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83315 | Oracle BI Publisher BI Platform Security component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83314 | Oracle BI Publisher Web Service API component unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83313 | Oracle BI Publisher BI Platform Security component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83312 | Oracle BI Publisher E-Business Suite - XDO component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83311 | Oracle BI Publisher BI Platform Security component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83310 | Oracle BI Publisher BI Platform Security component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83309 | Oracle BI Publisher Web Server component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83308 | Oracle BI Publisher BI Platform Security component unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83307 | Oracle BI Publisher BI Platform Security component unauthorized data access | 8.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83306 | Oracle JDeveloper Resource Catalog services component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83305 | Oracle BI Publisher BI Platform Security component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83304 | Oracle Business Intelligence Enterprise Edition unauthorized data access | 8.9CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83303 | Oracle BI Publisher BI Platform Security component unauthorized data modification | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83302 | Oracle BI Publisher BI Publisher Security component unauthorized data access | 8.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83301 | Oracle Business Intelligence Enterprise Edition Service Administration UI component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83300 | Oracle E-Business Suite XML Gateway Install component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83299 | Oracle Business Intelligence Enterprise Edition Analytics Web General component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83298 | Oracle BI Publisher BI Platform Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83297 | Oracle BI Publisher BI Platform Security component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83296 | Oracle Business Intelligence Enterprise Edition BI Search component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83295 | Oracle Business Intelligence Enterprise Edition Presentation services component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83294 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83293 | Oracle Business Intelligence Enterprise Edition FNDN component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83292 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83291 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83290 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83289 | Oracle Business Intelligence Enterprise Edition Analytics Web General component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83288 | Oracle Business Intelligence Enterprise Edition BI Search component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83287 | Oracle Business Intelligence Enterprise Edition unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83286 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83285 | Oracle Business Intelligence Enterprise Edition BI Search component unauthorized data access | 8.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83284 | Oracle BI Publisher BI Platform Security component unauthorized data modification | 8.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83283 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83282 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83281 | Oracle Helidon helidon-webserver component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83280 | Oracle Helidon helidon-webserver-http2 component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83279 | Oracle Agile PLM MCAD Connector CAX client component unauthorized data access | 5.5CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83278 | Oracle Helidon helidon-integrations-neo4j component unauthorized data access | 6.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83277 | Oracle Agile PLM MCAD Connector CAX client component unauthorized data modification | 7.3CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83276 | Oracle Helidon helidon-webclient-http2 component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83274 | Oracle Agile PLM MCAD Connector CAX client component unauthorized data access | 5.5CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83273 | Oracle Business Intelligence Enterprise Edition Platform Security component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83272 | Oracle Database Server improper privilege management | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83271 | Oracle Database Server improper privilege management | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83270 | Oracle Business Intelligence Enterprise Edition unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83269 | Oracle BI Publisher BI Platform Security component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83268 | Oracle BI Publisher BI Platform Security component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83267 | Oracle BI Publisher BI Publisher Security component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83266 | Oracle JDeveloper Resource Catalog services component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83265 | Oracle Web Services Manager Web services agent component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83264 | Oracle Supply Chain Product Lifecycle Analytics unauthorized data access | 8.4CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83263 | Oracle Supply Chain Product Lifecycle Analytics Installation Issues component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83262 | Oracle Supply Chain Product Lifecycle Analytics Installation Issues component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83261 | Oracle Supply Chain Product Lifecycle Analytics Core component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83260 | Oracle Supply Chain Agile PLM Event Java PX component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83259 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83258 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83257 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83256 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83255 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83254 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83253 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83252 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.0CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83251 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component denial of service | 6.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83250 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 6.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83249 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83248 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component denial of service | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83247 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83246 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83245 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83244 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83243 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83242 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 7.3CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83241 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83240 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 7.1CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83239 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager takeover | 7.0CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83238 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83237 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83236 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83235 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83234 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83233 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83232 | Oracle Data Integrator console / Repository Explorer component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83231 | Oracle Helidon helidon-dbclient-mongodb component unauthorized data access | 7.0CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83230 | Oracle Siebel CRM Deployment Siebel Management console component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83229 | Oracle Siebel CRM Deployment Siebel Management console component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83228 | Oracle Siebel CRM Deployment Server Infrastructure component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83227 | Oracle Siebel CRM Integration EAI component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83226 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83225 | Oracle Siebel CRM Deployment Server Infrastructure component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83224 | Oracle Siebel CRM Deployment Server Infrastructure component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83223 | Oracle Siebel CRM Deployment Siebel Remote component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83222 | Oracle Siebel CRM Deployment Server Infrastructure component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83221 | Oracle Siebel CRM Integration EAI component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83220 | Oracle Siebel CRM Integration Event Publish and Subscribe component unauthorized data access | 8.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83219 | Oracle Siebel CRM Deployment Server Infrastructure component unauthorized data access | 7.1CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83218 | Oracle Siebel CRM Deployment Server Infrastructure component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83217 | Oracle Siebel CRM End User Open UI component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83216 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83215 | Oracle Siebel CRM Deployment Server Infrastructure component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83214 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83213 | Oracle Siebel CRM End User Reports component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83212 | Oracle Siebel Apps - Self Service Helpdesk/Training component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83211 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83210 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 8.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83209 | Oracle Siebel CRM Development Workflow component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83208 | Oracle Siebel CRM Deployment Migration component takeover | 8.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83207 | Oracle Siebel CRM Development Integration - Scripting component unauthorized data modification | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83206 | Oracle Banking Corporate Lending Process Management Base component takeover | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83205 | Oracle E-Business Suite Applications Framework Personalization component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83204 | Oracle E-Business Suite Sourcing Internal Operations component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83203 | Oracle Siebel CRM End User Open UI component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83202 | Oracle Siebel CRM Deployment Server Infrastructure component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83201 | Oracle Siebel CRM Deployment Server Infrastructure component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83200 | Oracle E-Business Suite Process Manufacturing Intelligence unauthorized data access | 6.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83199 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83198 | Oracle E-Business Suite Field Service Internal Operations component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83197 | Oracle Siebel Apps - Financial Services Financial Accounts component unauthorized data access | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83196 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83195 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83194 | Oracle E-Business Suite Depot Repair Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83193 | Oracle Siebel Apps - Life Sciences takeover | 7.3CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83192 | Oracle Siebel CRM End User Open UI component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83191 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83190 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 7.3CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83189 | Oracle E-Business Suite User Management Proxy User Delegation component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83188 | Oracle E-Business Suite Depot Repair Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83187 | Oracle E-Business Suite Common Applications Calendar unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83186 | Oracle E-Business Suite Common Applications Calendar unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83185 | Oracle E-Business Suite Common Applications unauthorized data access | 7.3CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83184 | Oracle E-Business Suite Application Object Library Core component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83183 | Oracle Siebel CRM Deployment Server Infrastructure component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83182 | Oracle Siebel CRM Development Configuration tools component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83181 | Oracle Siebel CRM Development Workspaces component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83180 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83179 | Oracle E-Business Suite Common Applications Calendar unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83178 | Oracle E-Business Suite Application Object Library Core component takeover | 8.0CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83177 | Oracle E-Business Suite One-to-One Fulfillment Documents component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83176 | Oracle E-Business Suite Common Applications CRM User Management Framework component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83175 | Oracle E-Business Suite Application Object Library Core component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83174 | Oracle E-Business Suite CRM Technical Foundation unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83173 | Oracle E-Business Suite One-to-One Fulfillment Documents component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83172 | Oracle E-Business Suite Sales Online OSO Other component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83171 | Oracle E-Business Suite One-to-One Fulfillment Documents component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83170 | Oracle E-Business Suite One-to-One Fulfillment Documents component takeover | 8.0CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83169 | Oracle E-Business Suite One-to-One Fulfillment Java Server Issues component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83168 | Oracle E-Business Suite Applications Manager Oracle Diagnostics Interfaces component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83167 | Oracle E-Business Suite Application Object Library Core component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83166 | Oracle E-Business Suite Customer Interaction History unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83165 | Oracle E-Business Suite Customer Interaction History User interface component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83164 | Oracle E-Business Suite Customer Interaction History Outcome-Result component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83163 | Oracle E-Business Suite Application Object Library Attachments / file upload component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83162 | Oracle E-Business Suite Application Object Library Core component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83161 | Oracle E-Business Suite Project Intelligence unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83160 | Oracle Database Server takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83159 | Oracle E-Business Suite Applications DBA ADPatch component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83158 | Oracle E-Business Suite Applications Manager unauthorized data access | 7.1CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83157 | Oracle E-Business Suite Applications Manager Command Line - RapidClone component takeover | 8.0CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83156 | Oracle Database Server takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83155 | Oracle Siebel CRM Deployment Server Infrastructure component unauthorized data access | 7.3CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83154 | Oracle Siebel CRM End User Open UI component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83153 | Oracle Siebel CRM Deployment Server Infrastructure component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83152 | Oracle E-Business Suite Project Intelligence Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83151 | Oracle Service Delivery Platform Messaging Enabler component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83150 | Oracle Application Testing Suite improper privilege management | 7.0CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83149 | Oracle Application Testing Suite improper access control | 9.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83148 | Oracle Application Testing Suite improper privilege management | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83147 | Oracle PeopleSoft Enterprise FIN Inventory Brazil takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83146 | Oracle Siebel CRM End User Open UI component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83145 | Oracle Siebel Apps - Customer Order Management unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83144 | Oracle Siebel Apps - Customer Order Management unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83143 | Oracle Siebel Apps - Life Sciences eDetailing component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83142 | Oracle E-Business Suite Proposals Internal Operations component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83141 | Oracle E-Business Suite Field Service Internal Operations component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83140 | Oracle E-Business Suite Field Service Internal Operations component unauthorized data access | 6.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83138 | Oracle E-Business Suite Spares Management Internal Operations component takeover | 8.0CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83137 | Oracle E-Business Suite Spares Management Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83136 | Oracle E-Business Suite Spares Management Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83135 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83134 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83133 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83132 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83131 | Oracle Web Applications Desktop Integrator file download component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83130 | Oracle E-Business Suite Site Hub Internal Operations component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83129 | Oracle E-Business Suite Sales Internal Operations component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83128 | Oracle E-Business Suite Sales Offline Internal Operations component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83127 | Oracle E-Business Suite Sales Offline Internal Operations component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83126 | Oracle E-Business Suite Sales Online Internal Operations component unauthorized data access | 7.6CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83125 | Oracle E-Business Suite Report Manager Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83124 | Oracle E-Business Suite Sales Online Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83123 | Oracle E-Business Suite Report Manager Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83122 | Oracle E-Business Suite Report Manager Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83121 | Oracle E-Business Suite Marketing Audience component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83120 | Oracle E-Business Suite Alert Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83119 | Oracle E-Business Suite User Management Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83118 | Oracle E-Business Suite Applications DBA AD Utilities component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83117 | Oracle E-Business Suite Applications DBA AD Utilities component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83116 | Oracle E-Business Suite Order Management Product Diagnostic tools component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83115 | Oracle E-Business Suite Applications Manager unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83114 | Oracle E-Business Suite Quality Internal Operations component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83113 | Oracle E-Business Suite Quality Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83112 | Oracle Lease and Finance Management Internal Operations component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83111 | Oracle E-Business Suite Partner Management Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83110 | Oracle E-Business Suite Marketing Audience component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83109 | Oracle Forms Services, C/S, Charmode component information disclosure | 5.3CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83108 | Oracle Forms Services, C/S, Charmode component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83107 | Oracle Forms Services, C/S, Charmode component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83106 | Oracle Forms Services, C/S, Charmode component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83105 | Oracle Forms Services, C/S, Charmode component takeover | 9.0CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83104 | Oracle Forms Services, C/S, Charmode component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83103 | Oracle Forms Services, C/S, Charmode component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83102 | Oracle Forms Services, C/S, Charmode component unauthorized data access | 7.4CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83101 | Oracle Forms Services, C/S, Charmode component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83100 | Oracle Forms Services, C/S, Charmode component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83099 | Oracle Forms Services, C/S, Charmode component takeover | 10.0CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83098 | Oracle Forms Services, C/S, Charmode component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83097 | Oracle Forms Services, C/S, Charmode component unauthorized data modification | 6.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83096 | Oracle Forms Services, C/S, Charmode component unauthorized data access | 7.9CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83095 | Oracle Forms Services, C/S, Charmode component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83094 | Oracle Forms Services, C/S, Charmode component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83093 | Oracle Forms Services, C/S, Charmode component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83092 | Oracle E-Business Suite Field Service Internal Operations component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83091 | Oracle E-Business Suite Field Service Internal Operations component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83090 | Oracle E-Business Suite Spares Management Internal Operations component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83089 | Oracle E-Business Suite Alert Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83088 | Oracle Database Server improper access control | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83087 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83086 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83085 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 8.2CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83084 | Oracle E-Business Suite Marketing Audience component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83083 | Oracle E-Business Suite Marketing Audience component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83082 | Oracle E-Business Suite Marketing Audience component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83081 | Oracle Financial Services Applications Banking Corporate Lending unauthorized data access | 8.0CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83080 | Oracle Financial Services Applications Banking Branch Reports component takeover | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83079 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 7.9CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83078 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83077 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data modification | 6.4CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83076 | Oracle E-Business Suite HR Intelligence Internal Operations component unauthorized data modification | 6.8CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83075 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83074 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83073 | Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component unauthorized data access | 8.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83072 | Oracle E-Business Suite Applications Framework unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83071 | Oracle Business Intelligence Enterprise Edition Machine Learning component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83070 | Oracle PeopleSoft Enterprise PRTL Interaction Hub unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83069 | Oracle Fusion Middleware Control Framework component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83068 | Oracle Enterprise Manager for Oracle Database Core component unauthorized data access | 7.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83067 | Oracle JDeveloper ADF Shared components component unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83066 | Oracle Internet Directory OID LDAP Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83065 | Oracle WebCenter Portal Runtime tools component takeover | 7.5CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83064 | Oracle WebCenter Portal Runtime tools component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83063 | Oracle Internet Directory OID LDAP Server component takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83062 | Oracle Internet Directory OID LDAP Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83061 | Oracle Internet Directory OID LDAP Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83060 | Oracle Internet Directory OID LDAP Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83059 | Oracle Internet Directory OID LDAP Server component takeover | 10.0CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83058 | Oracle Internet Directory OID LDAP Server component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83057 | Oracle Internet Directory OID LDAP Server component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83056 | Oracle Internet Directory OID LDAP Server component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83055 | Oracle Internet Directory OID LDAP Server component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83054 | Oracle Internet Directory OID LDAP Server component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83053 | Oracle WebCenter Portal Runtime tools component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83052 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83051 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83050 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83049 | Oracle WebCenter Portal Security Framework component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83048 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83047 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 8.2CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83046 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83045 | Oracle WebCenter Portal Runtime tools component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83044 | Oracle E-Business Suite XML Gateway Install component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83043 | Oracle WebCenter Portal Composer component takeover | 9.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83042 | Oracle Identity Manager OIM Legacy UI component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83041 | Oracle WebCenter Portal Portlet services component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83040 | Oracle WebCenter Portal Portlet services component takeover | 9.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83039 | Oracle WebCenter Portal Composer component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83038 | Oracle WebLogic Server TopLink Integration component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83037 | Oracle WebCenter Sites takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83036 | Oracle WebCenter Sites takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83035 | Oracle WebCenter Sites takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83034 | Oracle WebCenter Sites unauthorized data access | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83033 | Oracle WebCenter Sites takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83032 | Oracle WebCenter Sites takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83031 | Oracle WebCenter Sites takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83030 | Oracle Managed File Transfer MFT Runtime Server component unauthorized data modification | 8.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83029 | Oracle Managed File Transfer MFT Runtime Server component unauthorized data access | 9.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83028 | Oracle Identity Manager Connector Core component takeover | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83027 | Oracle Identity Manager Connector Core component unauthorized data access | 9.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83026 | Oracle Identity Manager Connector Core component takeover | 8.3CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83025 | Oracle Identity Manager Connector Core component unauthorized data access | 8.7CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83024 | Oracle Identity Manager Connector Core component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83023 | Oracle Identity Manager Connector Core component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83022 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 7.9CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83021 | Oracle WebLogic Server Web Container component takeover | 10.0CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83020 | Oracle Platform Security for Java Centralized Thirdparty Jars component takeover | 10.0CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83019 | Oracle PeopleSoft Enterprise PeopleTools SQR component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83018 | Oracle PeopleSoft Enterprise PeopleTools SQR component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-83017 | Oracle PeopleSoft Enterprise PeopleTools Report Distribution component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83016 | Oracle PeopleSoft Enterprise PeopleTools SQR component takeover | 7.2CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83015 | Oracle PeopleSoft Enterprise PeopleTools Cube Manager component takeover | 7.0CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83014 | Oracle PeopleSoft Enterprise PeopleTools Cube Manager component unauthorized data modification | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83013 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83012 | Oracle WebCenter Enterprise Capture Client Bundle component unauthorized data access | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83011 | Oracle Platform Security for Java Centralized Thirdparty Jars component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83010 | Oracle WebCenter Enterprise Capture Client Bundle component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83009 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83008 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83007 | Oracle WebCenter Enterprise Capture Client Bundle component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83006 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83005 | Oracle WebCenter Enterprise Capture Client Bundle component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-83004 | Oracle WebCenter Enterprise Capture Client Bundle component unauthorized data access | 7.2CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-83003 | Oracle WebCenter Enterprise Capture Client Bundle component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83002 | Oracle Access Manager Authentication Engine component takeover | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-83001 | Oracle Access Manager Authentication Engine component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-83000 | Oracle Service Delivery Platform Messaging Enabler component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-82999 | Oracle Service Delivery Platform Messaging Enabler component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-82998 | Oracle Service Delivery Platform Messaging Enabler component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-82997 | Oracle Service Delivery Platform Messaging Enabler component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-82996 | Oracle Platform Security for Java Centralized Thirdparty Jars component takeover | 7.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-82995 | Oracle Platform Security for Java Centralized Thirdparty Jars component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-82994 | Oracle Platform Security for Java Centralized Thirdparty Jars component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-82993 | Oracle PeopleSoft Enterprise PeopleTools Business Interlink component unauthorized data access | 8.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-82992 | Oracle Siebel CRM Deployment Installation component takeover | 7.8CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-82837 | Insertion of sensitive information into sent data in GitLab | 5.3CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-82567 | mySCADA myPRO Manager missing authorization | 5.3CNA v4.0 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-82191 | J2Store PayPal notify redirect vulnerability | 5.3CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-82190 | Joomla extension j2commerce.com Predictable/forgeable order access token in J2Store | 6.3CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-82189 | Joomla extension j2commerce.com Any order can be marked Failed by anyone in J2Store | 8.7CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-81927 | Concrete CMS is vulnerable to stored XSS via SVG upload in Reject sanitization mode | 1.8CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-81926 | Concrete CMS location panel duplicate-path dialog cross-site scripting | 2.0CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-81925 | Concrete CMS is vulnerable to reflected cross-site scripting | 2.1CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-81924 | Concrete CMS is vulnerable to cross-site request forgery (CSRF) in theme page Template Activation | 2.1CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-81923 | Concrete CMS is missing authorization in the SEO Bulk Update Meta Tags editor | 2.1CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-81922 | Concrete CMS sitemap page reorder missing authorization | 2.1CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-81921 | In Concrete CMS to 9,5,2, OAuth 2.0 Refresh-Token Grant Bypasses Account Status | 2.3CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-81920 | Concrete CMS SEO excluded words reset endpoint cross-site request forgery | 2.3CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-81919 | Concrete CMS is vulnerable to cross-site request forgery (CSRF) in Block Arrangement endpoint | 2.3CNA v4.0 | 0.1% | 2026-09-15 | |
| CVE-2026-81899 | Concrete CMS Groups dashboard group folder name cross-site scripting | 7.3CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-81898 | Concrete CMS below is vulnerable to stored XSS | 7.5CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-81897 | Concrete CMS below is vulnerable to stored XSS via Express form Text control save_control | 7.7CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-81896 | Concrete CMS below is vulnerable to stored XSS in Concrete CMS Form Submissions Report | 8.4CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-81895 | Concrete CMS is vulnerable to stored SQL injection in Concrete CMS Document library block | 8.5CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-81894 | Concrete CMS Gallery block caption field cross-site scripting | 8.5CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-81855 | Wärtsilä FOS-Onboard use of hard-coded cryptographic key | 9.3CNA v4.0 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-81568 | Joomla extension j2commerce.com arbitrary file read via `task=download` in J2Store | 8.7CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-81567 | J2Commerce J2Store extension for Joomla storefront product list SQL injection | 8.7CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-81320 | Red Hat build of Apache Camel hawtio-operator information disclosure | 5.5CNA v3.1 | 0.2% | 2026-09-15 | |
| CVE-2026-81303 | Red Hat build of Apache Camel Hawtio-operator: Hawtio-operator: Routes/custom-host confused-deputy | 6.3CNA v3.1 | 0.5% | 2026-09-15 | |
| CVE-2026-81240 | Dell Wyse Management Suite unrestricted file upload | 8.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-81239 | Dell Wyse Management Suite unrestricted file upload | 8.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-81238 | Dell Wyse Management Suite missing authentication | 7.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-81237 | Dell Wyse Management Suite improper authentication | 6.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-81236 | Dell Wyse Management Suite unrestricted file upload | 8.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-81235 | Dell Wyse Management Suite missing cryptographic step | 8.0CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-80489 | The GNU C Library glibc EUC_JISX0213 decoding may hang on crafted input | 5.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-80217 | LITE-ON Technology FF-RFI079I4 hidden functionality | 8.7CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-79994 | Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race | 8.7CNA v4.0 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-79705 | Red Hat Buildah copier package path traversal | 4.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-79699 | Red Hat containers/storage tar layer extraction vulnerability | 4.4CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-79551 | Tenda NVR_4H CH3 hard-coded cryptographic key | 7.5CISA ADP v3.1 | 0.3% | 2026-09-15 | |
| CVE-2026-79425 | /adminapi/file/online_upload component of CRMEB v6.0.0 authenticated server-side request forgery | 8.1CISA ADP v3.1 | 0.4% | 2026-09-15 | |
| CVE-2026-79411 | Webkul Bagisto admin user management privilege escalation | 8.8CISA ADP v3.1 | 0.5% | 2026-09-15 | |
| CVE-2026-79410 | Webkul Bagisto add-to-cart quantity improper input validation | 8.1CISA ADP v3.1 | 0.4% | 2026-09-15 | |
| CVE-2026-79409 | Webkul Bagisto add-to-cart API insecure direct object reference | 6.5CISA ADP v3.1 | 0.5% | 2026-09-15 | |
| CVE-2026-79303 | kaiten SQL injection | 9.9CISA ADP v3.1 | 0.4% | 2026-09-15 | Exploit code |
| CVE-2026-78225 | Wärtsilä FOS-Onboard use of hard-coded cryptographic key | 9.5CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-78081 | J2Commerce J2Store cart and checkout controllers cross-site request forgery | 7.1CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-77972 | safeurl validated address is not bound to the request, allowing DNS rebinding | 9.0CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-77866 | SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts | 9.0CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-77853 | LITE-ON Technology FF-RFI079I4 OS command improper neutralization | 8.7CNA v4.0 | 1.9% | 2026-09-15 | Fix |
| CVE-2026-77179 | Docker Sandboxes virtio-fs host server symlink following | 9.4CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-77117 | The GNU C Library glibc SHIFT_JISX0213 decoding may hang on crafted input | 5.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-76873 | Netcore NR255-V stored cross-site scripting via DHCP and ARP Hostname fields | 5.1CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-76872 | Netcore NR255-V stored cross-site scripting via DHCP/ACL Management pages | 5.1CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-76871 | Netcore NR255-V sensitive information disclosure via VPN Read Handlers | 7.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-76870 | Netcore NR255-V out-of-bounds read in mtd_write firmware Upload Validation | 7.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-76869 | Netcore NR255-V stack-based buffer overflow in reboot_timer_set.cgi | 8.6CNA v4.0 | 0.6% | 2026-09-15 | |
| CVE-2026-76868 | Netcore NR255-V null pointer dereference in route_policy_add.cgi via Missing exit_port | 6.9CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-76867 | Netcore NR255-V stored cross-site scripting in Route/NAT Configuration CGI Handlers | 5.1CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-76866 | Netcore NR255-V OS command argument injection via Unquoted DDNS parameters | 8.6CNA v4.0 | 0.6% | 2026-09-15 | |
| CVE-2026-76865 | Netcore NR255-V null pointer dereference via Unchecked atoi in QoS Setter Handlers | 6.9CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-76864 | Netcore NR255-V stored cross-site scripting via Unescaped QoS Rule Names | 4.8CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-76863 | Netcore NR255-V sensitive information disclosure via QoS Bandwidth Plan Routes | 5.3CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-76862 | Netcore NR255-V OS command argument injection in Nettools tcpdump Launch Paths | 8.7CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-76861 | Netcore NR255-V stack-based buffer overflow in ntools_tcpdump_start_set.cgi | 8.7CNA v4.0 | 0.7% | 2026-09-15 | |
| CVE-2026-76860 | Netcore NR255-V stack-based buffer overflow in wake_up_set.cgi via MAC and ID Tokenization | 8.7CNA v4.0 | 0.5% | 2026-09-15 | |
| CVE-2026-76859 | Netcore NR255-V sensitive information disclosure via user_pass_show.cgi | 7.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-76858 | Netcore NR255-V stored cross-site scripting via DDNS eval in ddns_wan_list_show.cgi | 4.8CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-76857 | Netcore NR255-V Plaintext DDNS credential disclosure via ddns_wan_list_show.cgi | 7.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-76856 | Netcore NR255-V cross-site request forgery in WAN/LAN Configuration endpoints | 7.0CNA v4.0 | 0.2% | 2026-09-15 | |
| CVE-2026-76855 | Netcore NR255-V Cross-user session disclosure via Audit endpoints | 7.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-76854 | Netcore NR255-V sensitive information disclosure via l7_web_auth_user_show.cgi | 7.1CNA v4.0 | 0.4% | 2026-09-15 | |
| CVE-2026-76853 | Netcore NR268 Security Check Bypass in parame_put_file.cgi | 7.2CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-76852 | Netcore NR268 Forgeable Firmware Authenticity Check in mtd_write | 8.7CNA v4.0 | 0.3% | 2026-09-15 | |
| CVE-2026-76821 | OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper | 7.1CNA v4.0 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76820 | OpenCTI: Synchronizer SSRF: Stream fetch has no URL validation | 7.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-76796 | Newell Brands DYMO Connect Desktop improper file path validation | 5.1CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-76707 | Unauthenticated information disclosure in HPE Networking EdgeConnect SD-WAN Gateways | 4.3CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-76706 | Aruba EdgeConnect SD-WAN Orchestrator API endpoint information disclosure | 5.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-76705 | HPE EdgeConnect SD-WAN Gateways API endpoint of HPE Networking buffer overflow | 5.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76704 | Aruba EdgeConnect SD-WAN Orchestrator web-based management interface stored cross-site scripting | 5.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-76703 | HPE EdgeConnect SD-WAN Gateways buffer overflow | 5.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-76702 | Authenticated local denial of service vulnerability in HPE Networking EdgeConnect SD-WAN Gateways | 5.8CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-76701 | Unauthenticated sensitive information disclosure in HPE Networking EdgeConnect SD-WAN Gateways | 5.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-76700 | Unauthenticated denial of service vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways | 5.9CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76699 | HPE EdgeConnect SD-WAN Gateways buffer overflow | 6.4CNA v3.1 | 0.2% | 2026-09-15 | Fix |
| CVE-2026-76698 | HPE EdgeConnect SD-WAN Gateways command injection | 6.5CNA v3.1 | 4.5% | 2026-09-15 | Fix |
| CVE-2026-76697 | HPE EdgeConnect SD-WAN Gateways web-based management interface information disclosure | 6.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76696 | HPE EdgeConnect SD-WAN Gateways denial of service | 6.5CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-76695 | Unauthenticated buffer overflow vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways | 6.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76694 | HPE EdgeConnect SD-WAN Gateways command line interface of HPE Networking privilege escalation | 6.6CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76693 | Unauthenticated denial of service vulnerability in HPE Networking EdgeConnect SD-WAN Gateways | 7.0CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-76692 | HPE EdgeConnect SD-WAN Gateways information disclosure | 7.1CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-76691 | HPE EdgeConnect SD-WAN Gateways API endpoint of HPE Networking buffer overflow | 7.2CNA v3.1 | 0.8% | 2026-09-15 | Fix |
| CVE-2026-76690 | Authenticated remote code execution vulnerability in HPE Networking EdgeConnect SD-WAN Gateways | 7.2CNA v3.1 | 1.1% | 2026-09-15 | Fix |
| CVE-2026-76689 | HPE EdgeConnect SD-WAN Gateways configuration processing buffer overflow | 7.2CNA v3.1 | 0.9% | 2026-09-15 | Fix |
| CVE-2026-76688 | Aruba EdgeConnect SD-WAN Orchestrator web-based management interface authentication bypass | 7.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-76687 | Aruba EdgeConnect SD-WAN Orchestrator API endpoint privilege escalation | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76686 | HPE EdgeConnect SD-WAN Gateways underlying operating system denial of service | 7.5CNA v3.1 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-76685 | HPE EdgeConnect SD-WAN Gateways proxy packet processing buffer overflow | 8.1CNA v3.1 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-76684 | Authentication bypass vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API | 8.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76683 | HPE EdgeConnect SD-WAN Gateways API endpoint of HPE Networking buffer overflow | 8.1CNA v3.1 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-76682 | Unauthenticated denial of service vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways | 8.2CNA v3.1 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-76681 | EdgeConnect SD-WAN Orchestrator API information disclosure | 8.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-76680 | EdgeConnect SD-WAN Orchestrator API server-side request forgery | 8.5CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-76679 | Unauthenticated denial of service vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways | 8.6CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76678 | HPE EdgeConnect SD-WAN Gateways API endpoint privilege escalation | 8.8CNA v3.1 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-76677 | Authorization bypass leading to privilege escalation in HPE Networking EdgeConnect SD-WAN Gateways | 8.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76676 | HPE EdgeConnect SD-WAN Gateways underlying operating system buffer overflow | 8.8CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-76675 | HPE EdgeConnect SD-WAN Gateways command line interface command injection | 9.1CNA v3.1 | 1.5% | 2026-09-15 | Fix |
| CVE-2026-76674 | HPE EdgeConnect SD-WAN Gateways underlying operating system of HPE Networking buffer overflow | 9.8CNA v3.1 | 1.0% | 2026-09-15 | Fix |
| CVE-2026-76673 | Authentication bypass vulnerabilities in API of EdgeConnect SD-WAN Orchestrator | 9.8CNA v3.1 | 0.6% | 2026-09-15 | Fix |
| CVE-2026-76672 | Authenticated sensitive information disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator | 9.9CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76670 | Authorization bypass leading to privilege escalation in EdgeConnect SD-WAN Orchestrator | 9.9CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76669 | Authorization bypass leading to privilege escalation in EdgeConnect SD-WAN Orchestrator | 9.9CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-76159 | Duplicati for Windows incorrect permission assignment for critical resource | 7.0CNA v4.0 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-75983 | Eventin WordPress plugin privilege escalation | 7.5CNA v3.1 | 0.7% | 2026-09-15 | Fix |
| CVE-2026-75092 | Red Hat Enterprise Linux 9 scan_mysql actor of leapp-upgrade-el9toel10 privilege escalation | 7.3CNA v3.1 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-73966 | Oracle Siebel Apps - Marketing takeover | 7.2CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73965 | Oracle Siebel CRM Deployment Cloud Gateway component unauthorized data access | 6.8CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-73963 | Oracle WebCenter Portal Portlet services component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73962 | Oracle Access Manager Authentication Engine component unauthorized data access | 9.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73961 | Oracle JDeveloper ADF Faces component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73960 | Oracle PeopleSoft Enterprise PeopleTools Ren Server component denial of service | 7.5CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73959 | Oracle WebCenter Portal Composer component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73958 | Oracle Access Manager Authentication Engine component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73957 | Oracle WebCenter Portal Portlet services component unauthorized data access | 9.3CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73956 | Oracle WebCenter Portal Composer component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73955 | Oracle PeopleSoft Enterprise PeopleTools Charting component unauthorized data access | 7.3CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-73954 | Oracle PeopleSoft Enterprise PeopleTools Business Interlink component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73953 | Oracle WebCenter Portal Portlet services component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73952 | Oracle WebCenter Portal Portlet services component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73951 | Oracle WebCenter Portal Portlet services component takeover | 8.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73950 | Oracle Access Manager Authentication Engine component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73949 | Oracle WebCenter Portal Portlet services component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73948 | Oracle WebCenter Portal Composer component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73947 | Oracle Access Manager Authentication Engine component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73946 | Oracle Access Manager Authentication Engine component takeover | 9.1CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73945 | Oracle Access Manager Authentication Engine component takeover | 9.9CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73944 | Oracle Access Manager Authentication Engine component unauthorized data access | 9.1CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73943 | Oracle Identity Manager OIM Legacy UI component unauthorized data access | 7.6CNA v3.1 | 0.3% | 2026-09-15 | Fix |
| CVE-2026-73942 | Oracle Identity Manager OIM Legacy UI component takeover | 8.8CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73941 | Oracle Access Manager Authentication Engine component unauthorized data access | 8.6CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73940 | Oracle Access Manager Authentication Engine component takeover | 9.8CNA v3.1 | 0.5% | 2026-09-15 | Fix |
| CVE-2026-73926 | Oracle Access Manager Authentication Engine component unauthorized data access | 8.7CNA v3.1 | 0.4% | 2026-09-15 | Fix |
| CVE-2026-73807 | mySCADA myPRO Manager missing authorization | 9.3CNA v4.0 | 0.8% | 2026-09-15 | Fix |
| CVE-2026-73467 | Arista EOS TACACS+ configuration information disclosure | 6.0CNA v4.0 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-73466 | On affected platforms running Arista EOS, under certain circumstances plaintext user passwords | 6.0CNA v4.0 | 0.1% | 2026-09-15 | Fix |
| CVE-2026-73465 | On affected platforms running Arista EOS, under certain circumstances plaintext private keys | 6.0CNA v4.0 | 0.1% | 2026-09-15 | Fix |