# Vulnerabilities published in 2026 - [CVE-2026-87324](https://insights.sbomify.com/CVE-2026-87324/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 6.4) - [CVE-2026-87323](https://insights.sbomify.com/CVE-2026-87323/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 5.5) - [CVE-2026-87322](https://insights.sbomify.com/CVE-2026-87322/): Other in Oracle VM VirtualBox (high 8.4) - [CVE-2026-87321](https://insights.sbomify.com/CVE-2026-87321/): Other in JD Edwards EnterpriseOne Tools (medium 6.4) - [CVE-2026-87320](https://insights.sbomify.com/CVE-2026-87320/): Other in JD Edwards EnterpriseOne Tools (medium 6.7) - [CVE-2026-8732](https://insights.sbomify.com/CVE-2026-8732/): Auth bypass in WP Maps Pro (critical 9.8) - [CVE-2026-87319](https://insights.sbomify.com/CVE-2026-87319/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 6.3) - [CVE-2026-87318](https://insights.sbomify.com/CVE-2026-87318/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 6.3) - [CVE-2026-87317](https://insights.sbomify.com/CVE-2026-87317/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 4.8) - [CVE-2026-87316](https://insights.sbomify.com/CVE-2026-87316/): Missing authorization in JD Edwards EnterpriseOne Tools (high 7.8) - [CVE-2026-87315](https://insights.sbomify.com/CVE-2026-87315/): Missing authorization in JD Edwards EnterpriseOne Tools (high 7.5) - [CVE-2026-87314](https://insights.sbomify.com/CVE-2026-87314/): Missing authorization in JD Edwards EnterpriseOne Tools (high 7.4) - [CVE-2026-87313](https://insights.sbomify.com/CVE-2026-87313/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.8) - [CVE-2026-87312](https://insights.sbomify.com/CVE-2026-87312/): Missing authorization in JD Edwards EnterpriseOne Tools (high 7.5) - [CVE-2026-87311](https://insights.sbomify.com/CVE-2026-87311/): Denial of service in Oracle VM VirtualBox (medium 5.6) - [CVE-2026-87310](https://insights.sbomify.com/CVE-2026-87310/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.8) - [CVE-2026-8731](https://insights.sbomify.com/CVE-2026-8731/): Open5GS NRF client.c ogs_sbi_client_add denial of service (medium 5.3) - [CVE-2026-87309](https://insights.sbomify.com/CVE-2026-87309/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.1) - [CVE-2026-87308](https://insights.sbomify.com/CVE-2026-87308/): Information disclosure in JD Edwards EnterpriseOne Tools (high 7.1) - [CVE-2026-87307](https://insights.sbomify.com/CVE-2026-87307/): Information disclosure in JD Edwards EnterpriseOne Tools (high 7.1) - [CVE-2026-87306](https://insights.sbomify.com/CVE-2026-87306/): Information disclosure in JD Edwards EnterpriseOne Tools (high 8.1) - [CVE-2026-87305](https://insights.sbomify.com/CVE-2026-87305/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.1) - [CVE-2026-87304](https://insights.sbomify.com/CVE-2026-87304/): Missing authorization in Oracle Outside In Technology (high 8.6) - [CVE-2026-87303](https://insights.sbomify.com/CVE-2026-87303/): Denial of service in Oracle VM VirtualBox (medium 5.9) - [CVE-2026-87302](https://insights.sbomify.com/CVE-2026-87302/): Auth bypass in Oracle WebLogic Server (critical 9.1) - [CVE-2026-87301](https://insights.sbomify.com/CVE-2026-87301/): Information disclosure in Oracle VM VirtualBox (high 8.4) - [CVE-2026-87300](https://insights.sbomify.com/CVE-2026-87300/): Missing authorization in Oracle Weblogic Server Proxy Plug-in (high 8.7) - [CVE-2026-8730](https://insights.sbomify.com/CVE-2026-8730/): Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service (medium 5.3) - [CVE-2026-87299](https://insights.sbomify.com/CVE-2026-87299/): Privilege escalation in Oracle WebCenter Content (medium 6.1) - [CVE-2026-87298](https://insights.sbomify.com/CVE-2026-87298/): Privilege escalation in Oracle WebCenter Content (medium 6.5) - [CVE-2026-87297](https://insights.sbomify.com/CVE-2026-87297/): Privilege escalation in Oracle Communications Billing and Revenue Management (medium 6.7) - [CVE-2026-87296](https://insights.sbomify.com/CVE-2026-87296/): Missing authorization in Oracle Access Manager (high 7.5) - [CVE-2026-87295](https://insights.sbomify.com/CVE-2026-87295/): Missing authorization in Oracle HRMS (India) (medium 6.5) - [CVE-2026-87294](https://insights.sbomify.com/CVE-2026-87294/): Other in Oracle GraalVM Enterprise Edition (medium 6.5) - [CVE-2026-87293](https://insights.sbomify.com/CVE-2026-87293/): Other in Oracle Java SE (medium 5.4) - [CVE-2026-87292](https://insights.sbomify.com/CVE-2026-87292/): Auth bypass in Oracle GraalVM Enterprise Edition (low 3.7) - [CVE-2026-87291](https://insights.sbomify.com/CVE-2026-87291/): Auth bypass in Oracle Java SE (medium 5.3) - [CVE-2026-87290](https://insights.sbomify.com/CVE-2026-87290/): Information disclosure in Oracle GraalVM Enterprise Edition (medium 5.9) - [CVE-2026-8729](https://insights.sbomify.com/CVE-2026-8729/): Open5GS NRF message.c denial of service (medium 5.3) - [CVE-2026-87289](https://insights.sbomify.com/CVE-2026-87289/): Denial of service in Helidon (high 7.5) - [CVE-2026-87288](https://insights.sbomify.com/CVE-2026-87288/): Other in Oracle GraalVM (high 8.1) - [CVE-2026-87287](https://insights.sbomify.com/CVE-2026-87287/): Other in Oracle GraalVM (high 8.1) - [CVE-2026-87286](https://insights.sbomify.com/CVE-2026-87286/): Other in Oracle GraalVM (high 8.1) - [CVE-2026-87285](https://insights.sbomify.com/CVE-2026-87285/): Denial of service in Oracle VM VirtualBox (medium 6.0) - [CVE-2026-87284](https://insights.sbomify.com/CVE-2026-87284/): Other in Oracle VM VirtualBox (low 3.2) - [CVE-2026-87283](https://insights.sbomify.com/CVE-2026-87283/): Denial of service in Oracle VM VirtualBox (medium 6.0) - [CVE-2026-87282](https://insights.sbomify.com/CVE-2026-87282/): Denial of service in Oracle VM VirtualBox (medium 6.0) - [CVE-2026-87281](https://insights.sbomify.com/CVE-2026-87281/): Information disclosure in Oracle VM VirtualBox (low 3.2) - [CVE-2026-87280](https://insights.sbomify.com/CVE-2026-87280/): Denial of service in Oracle VM VirtualBox (medium 4.2) - [CVE-2026-8728](https://insights.sbomify.com/CVE-2026-8728/): Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of service (medium 5.3) - [CVE-2026-87279](https://insights.sbomify.com/CVE-2026-87279/): Denial of service in Oracle VM VirtualBox (medium 6.1) - [CVE-2026-87278](https://insights.sbomify.com/CVE-2026-87278/): Other in Oracle VM VirtualBox (medium 6.1) - [CVE-2026-87277](https://insights.sbomify.com/CVE-2026-87277/): Denial of service in Oracle VM VirtualBox (high 7.5) - [CVE-2026-87276](https://insights.sbomify.com/CVE-2026-87276/): Other in Oracle VM VirtualBox (high 7.5) - [CVE-2026-87275](https://insights.sbomify.com/CVE-2026-87275/): Other in Oracle VM VirtualBox (medium 4.6) - [CVE-2026-87274](https://insights.sbomify.com/CVE-2026-87274/): Denial of service in Oracle VM VirtualBox (medium 4.4) - [CVE-2026-87273](https://insights.sbomify.com/CVE-2026-87273/): Privilege escalation in Oracle VM VirtualBox (high 8.6) - [CVE-2026-87272](https://insights.sbomify.com/CVE-2026-87272/): Privilege escalation in Oracle VM VirtualBox (high 7.8) - [CVE-2026-87271](https://insights.sbomify.com/CVE-2026-87271/): Privilege escalation in Oracle VM VirtualBox (high 7.8) - [CVE-2026-87270](https://insights.sbomify.com/CVE-2026-87270/): Privilege escalation in Oracle VM VirtualBox (high 7.8) - [CVE-2026-8727](https://insights.sbomify.com/CVE-2026-8727/): Remote Code Execution in extension "Site Crawler" (crawler) (high 7.1) - [CVE-2026-87269](https://insights.sbomify.com/CVE-2026-87269/): Privilege escalation in Oracle VM VirtualBox (high 7.8) - [CVE-2026-87268](https://insights.sbomify.com/CVE-2026-87268/): Privilege escalation in Oracle VM VirtualBox (high 7.8) - [CVE-2026-87267](https://insights.sbomify.com/CVE-2026-87267/): Denial of service in Oracle VM VirtualBox (medium 5.3) - [CVE-2026-87266](https://insights.sbomify.com/CVE-2026-87266/): Missing authorization in Oracle Agile PLM (high 8.2) - [CVE-2026-87265](https://insights.sbomify.com/CVE-2026-87265/): Missing authorization in Oracle Purchasing (high 8.1) - [CVE-2026-87264](https://insights.sbomify.com/CVE-2026-87264/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 7.7) - [CVE-2026-87263](https://insights.sbomify.com/CVE-2026-87263/): Auth bypass in Oracle Business Intelligence Enterprise Edition (high 8.8) - [CVE-2026-87262](https://insights.sbomify.com/CVE-2026-87262/): Missing authorization in Oracle Agile Engineering Data Management (high 7.1) - [CVE-2026-87261](https://insights.sbomify.com/CVE-2026-87261/): Missing authorization in Oracle Agile Engineering Data Management (high 7.3) - [CVE-2026-87260](https://insights.sbomify.com/CVE-2026-87260/): Missing authorization in Oracle Agile Engineering Data Management (high 7.3) - [CVE-2026-8726](https://insights.sbomify.com/CVE-2026-8726/): SQL Injection in extension "News system" (news) (high 8.2) - [CVE-2026-87259](https://insights.sbomify.com/CVE-2026-87259/): Missing authorization in Oracle Agile Engineering Data Management (high 8.4) - [CVE-2026-87258](https://insights.sbomify.com/CVE-2026-87258/): Missing authorization in Oracle Agile PLM (high 7.6) - [CVE-2026-87257](https://insights.sbomify.com/CVE-2026-87257/): Missing authorization in Oracle Agile PLM (high 7.7) - [CVE-2026-87256](https://insights.sbomify.com/CVE-2026-87256/): Missing authorization in Oracle Agile PLM (high 7.7) - [CVE-2026-87255](https://insights.sbomify.com/CVE-2026-87255/): Auth bypass in Oracle Java SE (low 3.7) - [CVE-2026-87254](https://insights.sbomify.com/CVE-2026-87254/): Missing authorization in Oracle Agile PLM (high 7.5) - [CVE-2026-87253](https://insights.sbomify.com/CVE-2026-87253/): Missing authorization in Oracle Agile PLM (medium 6.1) - [CVE-2026-87252](https://insights.sbomify.com/CVE-2026-87252/): Missing authorization in Oracle Agile PLM (medium 6.8) - [CVE-2026-87251](https://insights.sbomify.com/CVE-2026-87251/): Auth bypass in Oracle Access Manager (critical 9.8) - [CVE-2026-87250](https://insights.sbomify.com/CVE-2026-87250/): Missing authorization in Oracle Hyperion Financial Management (high 7.6) - [CVE-2026-8725](https://insights.sbomify.com/CVE-2026-8725/): CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgery (medium 6.9) - [CVE-2026-87249](https://insights.sbomify.com/CVE-2026-87249/): Missing authorization in Oracle Hyperion Financial Management (high 7.1) - [CVE-2026-87248](https://insights.sbomify.com/CVE-2026-87248/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.7) - [CVE-2026-87247](https://insights.sbomify.com/CVE-2026-87247/): Privilege escalation in Oracle Hyperion Financial Management (high 7.5) - [CVE-2026-87246](https://insights.sbomify.com/CVE-2026-87246/): Privilege escalation in Oracle Hyperion Financial Management (high 7.2) - [CVE-2026-87245](https://insights.sbomify.com/CVE-2026-87245/): Privilege escalation in Oracle Hyperion Financial Management (high 8.0) - [CVE-2026-87244](https://insights.sbomify.com/CVE-2026-87244/): Privilege escalation in Oracle Hyperion Financial Management (high 7.2) - [CVE-2026-87243](https://insights.sbomify.com/CVE-2026-87243/): Missing authorization in Oracle Hyperion Financial Management (high 8.0) - [CVE-2026-87242](https://insights.sbomify.com/CVE-2026-87242/): Missing authorization in Oracle Hyperion Financial Management (high 7.4) - [CVE-2026-87241](https://insights.sbomify.com/CVE-2026-87241/): Missing authorization in Oracle Hyperion Financial Management (high 8.1) - [CVE-2026-87240](https://insights.sbomify.com/CVE-2026-87240/): Privilege escalation in Oracle Hyperion Financial Management (high 7.0) - [CVE-2026-8724](https://insights.sbomify.com/CVE-2026-8724/): Dataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injection (medium 5.1) - [CVE-2026-87239](https://insights.sbomify.com/CVE-2026-87239/): Privilege escalation in Oracle Hyperion Financial Management (high 7.2) - [CVE-2026-87238](https://insights.sbomify.com/CVE-2026-87238/): SQL injection in Oracle Hyperion Financial Management (high 8.8) - [CVE-2026-87237](https://insights.sbomify.com/CVE-2026-87237/): Privilege escalation in Oracle Hyperion Financial Management (high 7.5) - [CVE-2026-87236](https://insights.sbomify.com/CVE-2026-87236/): Missing authorization in Oracle Hyperion Financial Management (high 7.1) - [CVE-2026-87235](https://insights.sbomify.com/CVE-2026-87235/): Missing authorization in Oracle Hyperion Financial Management (high 7.4) - [CVE-2026-87234](https://insights.sbomify.com/CVE-2026-87234/): Missing authorization in Oracle Hyperion Financial Management (high 8.1) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/291/