# Vulnerabilities published in 2026


- [CVE-2026-87419](https://insights.sbomify.com/CVE-2026-87419/): Missing authorization in Oracle Service Bus (high 8.8)
- [CVE-2026-87418](https://insights.sbomify.com/CVE-2026-87418/): Information disclosure in PeopleSoft Enterprise PeopleTools (low 2.5)
- [CVE-2026-87417](https://insights.sbomify.com/CVE-2026-87417/): Information disclosure in Oracle Solaris (high 7.5)
- [CVE-2026-87416](https://insights.sbomify.com/CVE-2026-87416/): Information disclosure in PeopleSoft Enterprise PeopleTools (low 3.7)
- [CVE-2026-87415](https://insights.sbomify.com/CVE-2026-87415/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 5.3)
- [CVE-2026-87414](https://insights.sbomify.com/CVE-2026-87414/): Other in Oracle Solaris (low 3.1)
- [CVE-2026-87413](https://insights.sbomify.com/CVE-2026-87413/): Denial of service in Oracle Solaris (medium 5.5)
- [CVE-2026-87412](https://insights.sbomify.com/CVE-2026-87412/): Information disclosure in PeopleSoft Enterprise PeopleTools (low 2.7)
- [CVE-2026-87411](https://insights.sbomify.com/CVE-2026-87411/): Denial of service in Oracle Solaris (medium 5.5)
- [CVE-2026-87410](https://insights.sbomify.com/CVE-2026-87410/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 6.8)
- [CVE-2026-8741](https://insights.sbomify.com/CVE-2026-8741/): EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition (low 2.3)
- [CVE-2026-87409](https://insights.sbomify.com/CVE-2026-87409/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 6.5)
- [CVE-2026-87408](https://insights.sbomify.com/CVE-2026-87408/): Cross-site request forgery in Oracle Applications Framework (high 8.7)
- [CVE-2026-87407](https://insights.sbomify.com/CVE-2026-87407/): Open redirect in Oracle Applications Framework (medium 6.5)
- [CVE-2026-87404](https://insights.sbomify.com/CVE-2026-87404/): Missing authorization in Pasta (high 7.5)
- [CVE-2026-87403](https://insights.sbomify.com/CVE-2026-87403/): Missing authorization in Applications DBA (high 7.1)
- [CVE-2026-87402](https://insights.sbomify.com/CVE-2026-87402/): Other in Applications DBA (high 7.3)
- [CVE-2026-87401](https://insights.sbomify.com/CVE-2026-87401/): Information disclosure in PeopleSoft Enterprise PeopleTools (low 3.3)
- [CVE-2026-87400](https://insights.sbomify.com/CVE-2026-87400/): Missing authorization in Oracle WebCenter Content (medium 6.9)
- [CVE-2026-8740](https://insights.sbomify.com/CVE-2026-8740/): Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine (medium 5.3)
- [CVE-2026-87399](https://insights.sbomify.com/CVE-2026-87399/): Missing authorization in Oracle WebCenter Content (medium 6.3)
- [CVE-2026-87398](https://insights.sbomify.com/CVE-2026-87398/): Denial of service in Oracle Outside In Technology (high 7.5)
- [CVE-2026-87397](https://insights.sbomify.com/CVE-2026-87397/): Other in Oracle Outside In Technology (high 8.8)
- [CVE-2026-87396](https://insights.sbomify.com/CVE-2026-87396/): Missing authorization in Oracle Outside In Technology (medium 6.5)
- [CVE-2026-87395](https://insights.sbomify.com/CVE-2026-87395/): Denial of service in Oracle Outside In Technology (high 7.5)
- [CVE-2026-87394](https://insights.sbomify.com/CVE-2026-87394/): Missing authorization in Oracle Outside In Technology (high 8.2)
- [CVE-2026-87393](https://insights.sbomify.com/CVE-2026-87393/): Denial of service in Oracle Outside In Technology (medium 6.5)
- [CVE-2026-87392](https://insights.sbomify.com/CVE-2026-87392/): Missing authorization in WebCenter Content: Imaging (medium 6.5)
- [CVE-2026-87391](https://insights.sbomify.com/CVE-2026-87391/): Information disclosure in WebCenter Content: Imaging (medium 5.5)
- [CVE-2026-87390](https://insights.sbomify.com/CVE-2026-87390/): Information disclosure in Oracle WebCenter Content (medium 5.4)
- [CVE-2026-8739](https://insights.sbomify.com/CVE-2026-8739/): Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key (medium 6.9)
- [CVE-2026-87389](https://insights.sbomify.com/CVE-2026-87389/): Information disclosure in JD Edwards EnterpriseOne Human Resources Management (low 3.7)
- [CVE-2026-87388](https://insights.sbomify.com/CVE-2026-87388/): Missing authorization in JD Edwards EnterpriseOne Configurator (medium 5.3)
- [CVE-2026-87387](https://insights.sbomify.com/CVE-2026-87387/): Other in JD Edwards EnterpriseOne Homebuilder (medium 6.5)
- [CVE-2026-87386](https://insights.sbomify.com/CVE-2026-87386/): Denial of service in JD Edwards EnterpriseOne General Ledger (medium 5.3)
- [CVE-2026-87385](https://insights.sbomify.com/CVE-2026-87385/): Information disclosure in JD Edwards EnterpriseOne Human Resources Management (medium 4.8)
- [CVE-2026-87384](https://insights.sbomify.com/CVE-2026-87384/): Information disclosure in JD Edwards EnterpriseOne Human Resources Management (medium 5.4)
- [CVE-2026-87383](https://insights.sbomify.com/CVE-2026-87383/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 6.7)
- [CVE-2026-87382](https://insights.sbomify.com/CVE-2026-87382/): Information disclosure in JD Edwards EnterpriseOne Operational Sourcing (medium 6.5)
- [CVE-2026-87381](https://insights.sbomify.com/CVE-2026-87381/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 5.4)
- [CVE-2026-87380](https://insights.sbomify.com/CVE-2026-87380/): Information disclosure in JD Edwards EnterpriseOne Sales Order Entry (medium 6.5)
- [CVE-2026-8738](https://insights.sbomify.com/CVE-2026-8738/): Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error (medium 6.9)
- [CVE-2026-87379](https://insights.sbomify.com/CVE-2026-87379/): Information disclosure in WebCenter Content: Imaging (medium 4.3)
- [CVE-2026-87378](https://insights.sbomify.com/CVE-2026-87378/): Information disclosure in WebCenter Content: Imaging (medium 6.5)
- [CVE-2026-87377](https://insights.sbomify.com/CVE-2026-87377/): Missing authorization in WebCenter Content: Imaging (medium 6.8)
- [CVE-2026-87376](https://insights.sbomify.com/CVE-2026-87376/): Information disclosure in WebCenter Content: Imaging (medium 6.8)
- [CVE-2026-87375](https://insights.sbomify.com/CVE-2026-87375/): Information disclosure in WebCenter Content: Imaging (medium 6.5)
- [CVE-2026-87374](https://insights.sbomify.com/CVE-2026-87374/): Information disclosure in Oracle WebCenter Content (medium 6.8)
- [CVE-2026-87373](https://insights.sbomify.com/CVE-2026-87373/): Missing authorization in Oracle WebCenter Content (medium 6.5)
- [CVE-2026-87372](https://insights.sbomify.com/CVE-2026-87372/): Information disclosure in Oracle WebCenter Content (medium 6.5)
- [CVE-2026-87371](https://insights.sbomify.com/CVE-2026-87371/): Information disclosure in Oracle WebCenter Content (medium 6.8)
- [CVE-2026-87370](https://insights.sbomify.com/CVE-2026-87370/): Information disclosure in Oracle WebCenter Content (medium 6.5)
- [CVE-2026-8737](https://insights.sbomify.com/CVE-2026-8737/): Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication (medium 6.9)
- [CVE-2026-87369](https://insights.sbomify.com/CVE-2026-87369/): Denial of service in Oracle Service Bus (high 7.5)
- [CVE-2026-87367](https://insights.sbomify.com/CVE-2026-87367/): Information disclosure in Oracle GraalVM Enterprise Edition (low 3.7)
- [CVE-2026-87366](https://insights.sbomify.com/CVE-2026-87366/): Information disclosure in Oracle Applications Framework (medium 4.9)
- [CVE-2026-87365](https://insights.sbomify.com/CVE-2026-87365/): Denial of service in Oracle WebCenter Content (medium 6.5)
- [CVE-2026-87364](https://insights.sbomify.com/CVE-2026-87364/): Missing authorization in Oracle Service Bus (high 8.8)
- [CVE-2026-87363](https://insights.sbomify.com/CVE-2026-87363/): Information disclosure in Oracle Payroll (high 7.5)
- [CVE-2026-87362](https://insights.sbomify.com/CVE-2026-87362/): Information disclosure in Oracle Agile PLM (medium 6.5)
- [CVE-2026-87361](https://insights.sbomify.com/CVE-2026-87361/): Information disclosure in Oracle WebCenter Content (medium 4.3)
- [CVE-2026-87360](https://insights.sbomify.com/CVE-2026-87360/): Information disclosure in Oracle WebCenter Content (medium 5.3)
- [CVE-2026-8736](https://insights.sbomify.com/CVE-2026-8736/): Oinone Pamirs RestController LocalFileClient.java request.getParameter path traversal (low 2.4)
- [CVE-2026-87359](https://insights.sbomify.com/CVE-2026-87359/): Information disclosure in Oracle Service Bus (high 8.8)
- [CVE-2026-87358](https://insights.sbomify.com/CVE-2026-87358/): Information disclosure in Oracle General Ledger (high 7.1)
- [CVE-2026-87357](https://insights.sbomify.com/CVE-2026-87357/): Information disclosure in Order Capture (high 7.2)
- [CVE-2026-87356](https://insights.sbomify.com/CVE-2026-87356/): Information disclosure in Applications Platform Engineering (high 7.8)
- [CVE-2026-87355](https://insights.sbomify.com/CVE-2026-87355/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 4.4)
- [CVE-2026-87354](https://insights.sbomify.com/CVE-2026-87354/): Information disclosure in Oracle TimesTen In-Memory Database (medium 4.3)
- [CVE-2026-87353](https://insights.sbomify.com/CVE-2026-87353/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 4.5)
- [CVE-2026-87352](https://insights.sbomify.com/CVE-2026-87352/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 4.4)
- [CVE-2026-87351](https://insights.sbomify.com/CVE-2026-87351/): Missing authorization in Oracle GoldenGate (high 8.8)
- [CVE-2026-87350](https://insights.sbomify.com/CVE-2026-87350/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 4.5)
- [CVE-2026-8735](https://insights.sbomify.com/CVE-2026-8735/): Oinone Pamirs appConfigQuery PamirsParserConfig.java JsonUtils.parseMap deserialization (medium 5.3)
- [CVE-2026-87349](https://insights.sbomify.com/CVE-2026-87349/): Other in PeopleSoft Enterprise PeopleTools (medium 6.5)
- [CVE-2026-87348](https://insights.sbomify.com/CVE-2026-87348/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 4.2)
- [CVE-2026-87347](https://insights.sbomify.com/CVE-2026-87347/): Information disclosure in Oracle HTTP Server (critical 9.6)
- [CVE-2026-87346](https://insights.sbomify.com/CVE-2026-87346/): Other in Oracle HTTP Server (high 8.7)
- [CVE-2026-87345](https://insights.sbomify.com/CVE-2026-87345/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 6.1)
- [CVE-2026-87344](https://insights.sbomify.com/CVE-2026-87344/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 6.5)
- [CVE-2026-87343](https://insights.sbomify.com/CVE-2026-87343/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 4.8)
- [CVE-2026-87342](https://insights.sbomify.com/CVE-2026-87342/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 6.5)
- [CVE-2026-87340](https://insights.sbomify.com/CVE-2026-87340/): Missing authorization in PeopleSoft Enterprise PeopleTools (low 3.7)
- [CVE-2026-8734](https://insights.sbomify.com/CVE-2026-8734/): Oinone Pamirs queryListByWrapper RSQLToSQLNodeConnector.makeVariable sql injection (medium 6.9)
- [CVE-2026-87339](https://insights.sbomify.com/CVE-2026-87339/): Information disclosure in Siebel CRM Integration (low 3.1)
- [CVE-2026-87338](https://insights.sbomify.com/CVE-2026-87338/): Information disclosure in Siebel CRM Integration (medium 6.9)
- [CVE-2026-87337](https://insights.sbomify.com/CVE-2026-87337/): Information disclosure in Oracle Access Manager (critical 10.0)
- [CVE-2026-87336](https://insights.sbomify.com/CVE-2026-87336/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 5.3)
- [CVE-2026-87335](https://insights.sbomify.com/CVE-2026-87335/): Information disclosure in Applications DBA (medium 6.5)
- [CVE-2026-87334](https://insights.sbomify.com/CVE-2026-87334/): Information disclosure in Oracle JDeveloper (medium 5.5)
- [CVE-2026-87333](https://insights.sbomify.com/CVE-2026-87333/): Information disclosure in JD Edwards EnterpriseOne Tools (low 3.6)
- [CVE-2026-87332](https://insights.sbomify.com/CVE-2026-87332/): Information disclosure in JD Edwards EnterpriseOne Tools (low 3.0)
- [CVE-2026-87331](https://insights.sbomify.com/CVE-2026-87331/): Information disclosure in JD Edwards EnterpriseOne Tools (low 3.4)
- [CVE-2026-87330](https://insights.sbomify.com/CVE-2026-87330/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 4.2)
- [CVE-2026-8733](https://insights.sbomify.com/CVE-2026-8733/): Investintech SlimPDFReader SlimPDFReader.exe sub_3B4610 stack-based overflow (medium 5.3)
- [CVE-2026-87329](https://insights.sbomify.com/CVE-2026-87329/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 6.5)
- [CVE-2026-87328](https://insights.sbomify.com/CVE-2026-87328/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 5.9)
- [CVE-2026-87327](https://insights.sbomify.com/CVE-2026-87327/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 5.9)
- [CVE-2026-87326](https://insights.sbomify.com/CVE-2026-87326/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 5.9)
- [CVE-2026-87325](https://insights.sbomify.com/CVE-2026-87325/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/290/