Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 255 of 1013.
- CVE-2026-91637 Missing authorization in Oracle Essbase
- CVE-2026-91636 Information disclosure in Oracle Essbase
- CVE-2026-91635 Missing authorization in Oracle Essbase
- CVE-2026-91634 Information disclosure in Oracle Essbase
- CVE-2026-91633 Missing authorization in Oracle Essbase
- CVE-2026-91632 Information disclosure in Oracle Essbase
- CVE-2026-91631 Information disclosure in Oracle Essbase
- CVE-2026-91630 Information disclosure in Oracle Essbase
- CVE-2026-9163 SQLi in GIS Informatics' GisLab Laboratory Management System
- CVE-2026-91629 Information disclosure in Oracle Communications Billing and Revenue Management
- CVE-2026-91628 Information disclosure in Oracle Communications Billing and Revenue Management
- CVE-2026-91627 Privilege escalation in Oracle Communications Billing and Revenue Management
- CVE-2026-91625 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-91624 Auth bypass in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-91623 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-91622 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-9162 Global session revocation does not invalidate active WebSocket connections
- CVE-2026-91617 Information disclosure in Oracle Middleware Common Libraries and Tools
- CVE-2026-91616 Information disclosure in Oracle Middleware Common Libraries and Tools
- CVE-2026-91615 Missing authorization in Oracle Database Server
- CVE-2026-91614 Information disclosure in Oracle Communications Unified Inventory Management
- CVE-2026-91613 Information disclosure in Oracle Communications Unified Inventory Management
- CVE-2026-91612 Information disclosure in Oracle Communications Unified Inventory Management
- CVE-2026-91610 Missing authorization in Oracle REST Data Services
- CVE-2026-9161 User Enumeration in DernekPlus' Website Template
- CVE-2026-91609 Information disclosure in Oracle REST Data Services
- CVE-2026-91608 Information disclosure in Oracle BI Publisher
- CVE-2026-91607 Information disclosure in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91604 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-91600 Information disclosure in Oracle Business Intelligence Enterprise Edition
- CVE-2026-9160 CSTI in Arma Digital's Website Template
- CVE-2026-91598 Information disclosure in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91597 Missing authorization in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91590 Missing authorization in Oracle BI Publisher
- CVE-2026-91588 Other in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91582 Denial of service in Oracle Business Intelligence Enterprise Edition
- CVE-2026-9158 Use after free in Eclipse 4diac
- CVE-2026-91579 Open redirect in Oracle BI Publisher
- CVE-2026-91577 Missing authorization in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91576 Missing authorization in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91574 Missing authorization in Oracle BI Publisher
- CVE-2026-91573 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-9157 Remote Code Execution in Gmission Web FAX
- CVE-2026-91568 Missing authorization in Oracle Database Server
- CVE-2026-91565 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-91563 Privilege escalation in Oracle OLAP
- CVE-2026-91562 Missing authorization in PeopleSoft Enterprise FIN Inventory Brazil
- CVE-2026-9156 Tanium addressed a denial of service vulnerability in Tanium Server.
- CVE-2026-91559 Missing authorization in PeopleSoft Enterprise FIN Manufacturing Brazil
- CVE-2026-91557 Privilege escalation in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91555 Cross-site request forgery in Oracle BI Publisher
- CVE-2026-91554 Missing authorization in Oracle BI Publisher
- CVE-2026-91553 Missing authorization in PeopleSoft Enterprise FIN Product Configurator Brazil
- CVE-2026-91552 Information disclosure in Oracle WebCenter Sites
- CVE-2026-91550 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-9155 OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.
- CVE-2026-91549 Open redirect in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91547 Privilege escalation in Oracle GoldenGate
- CVE-2026-91546 Auth bypass in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91545 Missing authorization in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91542 Information disclosure in Oracle WebCenter Sites
- CVE-2026-91541 Missing authorization in PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-9154 Arbitrary File Write in Rapid7 InsightConnect Sed Plugin
- CVE-2026-91539 Privilege escalation in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91537 Privilege escalation in Oracle Solaris
- CVE-2026-91536 Missing authorization in Oracle SOA Suite
- CVE-2026-91535 Missing authorization in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91534 Missing authorization in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91532 Missing authorization in Oracle Applications Manager
- CVE-2026-91530 Missing authorization in Oracle GoldenGate
- CVE-2026-9153 Arbitrary File Read in Rapid7 InsightConnect Sed Plugin
- CVE-2026-91528 Information disclosure in Oracle BI Publisher
- CVE-2026-91527 Missing authorization in Oracle ZFS Storage Appliance Kit
- CVE-2026-91526 Open redirect in Oracle BI Publisher
- CVE-2026-91524 Denial of service in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91523 Missing authorization in Oracle Business Intelligence Enterprise Edition
- CVE-2026-91521 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-91520 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-9152 Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction
- CVE-2026-91519 Missing authorization in PeopleSoft Enterprise PeopleTools
- CVE-2026-91518 Missing authorization in Oracle BI Publisher
- CVE-2026-91517 Missing authorization in Oracle Management Pack for Oracle GoldenGate
- CVE-2026-91515 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-91514 Information disclosure in Oracle BI Publisher
- CVE-2026-91512 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-91511 Missing authorization in Oracle Purchasing
- CVE-2026-9151 Command Injection Vulnerability in OpenVPN on Multiple TP-Link Archer Routers
- CVE-2026-91506 Missing authorization in Workflow
- CVE-2026-91505 Missing authorization in PeopleSoft Enterprise PeopleTools
- CVE-2026-91504 Missing authorization in Oracle WebCenter Content
- CVE-2026-91503 Missing authorization in Oracle Database Server
- CVE-2026-91502 Missing authorization in Oracle WebLogic Server
- CVE-2026-91501 Missing authorization in Oracle Identity Manager
- CVE-2026-9150 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
- CVE-2026-91499 Privilege escalation in Oracle Database Server
- CVE-2026-91497 Missing authorization in PeopleSoft Enterprise PeopleTools
- CVE-2026-91496 Missing authorization in Workflow
- CVE-2026-91495 Auth bypass in Oracle WebCenter Content
- CVE-2026-91494 Missing authorization in Oracle Identity Manager Connector
- CVE-2026-91493 Auth bypass in Oracle Identity Manager Connector