Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 324 of 1013.
- CVE-2026-83464 Privilege escalation in Oracle Mobile Application Server
- CVE-2026-83463 Privilege escalation in Oracle Mobile Application Server
- CVE-2026-83462 Auth bypass in Oracle Mobile Application Server
- CVE-2026-83461 Missing authorization in Oracle Mobile Application Server
- CVE-2026-83460 Missing authorization in Helidon
- CVE-2026-8346 D-Link DIR-816 portForward command injection
- CVE-2026-83459 Denial of service in Helidon
- CVE-2026-83458 Denial of service in Helidon
- CVE-2026-83457 Denial of service in Oracle Demand Signal Repository
- CVE-2026-83456 Privilege escalation in Oracle Demand Signal Repository
- CVE-2026-83455 Missing authorization in Oracle Demand Signal Repository
- CVE-2026-83454 Privilege escalation in Oracle Document Management and Collaboration
- CVE-2026-83453 Privilege escalation in Oracle Document Management and Collaboration
- CVE-2026-83452 Auth bypass in Oracle Document Management and Collaboration
- CVE-2026-83451 Privilege escalation in Oracle Product Workbench
- CVE-2026-83450 Privilege escalation in Oracle Bills of Material
- CVE-2026-8345 D-Link DIR-816 singlePortForward sub_445E7C command injection
- CVE-2026-83449 Missing authorization in Oracle Bills of Material
- CVE-2026-83448 Missing authorization in Oracle Bills of Material
- CVE-2026-83447 Missing authorization in Oracle Bills of Material
- CVE-2026-83446 Missing authorization in Oracle Financials Common Modules
- CVE-2026-83445 Privilege escalation in Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-83444 Privilege escalation in Oracle Product Hub
- CVE-2026-83443 Information disclosure in Oracle Assets
- CVE-2026-83442 Privilege escalation in Oracle Product Hub
- CVE-2026-83441 Missing authorization in Oracle Product Hub
- CVE-2026-83440 Privilege escalation in Oracle Product Hub
- CVE-2026-8344 D-Link DIR-816 formDMZ.cgi sub_445E7C command injection
- CVE-2026-83439 Missing authorization in Helidon
- CVE-2026-83438 Missing authorization in Oracle Engineering
- CVE-2026-83437 Information disclosure in Oracle Engineering
- CVE-2026-83436 Denial of service in Oracle Depot Repair
- CVE-2026-83435 Missing authorization in Oracle Bills of Material
- CVE-2026-83434 Missing authorization in Oracle Product Workbench
- CVE-2026-83433 Missing authorization in Oracle Depot Repair
- CVE-2026-83432 Missing authorization in Oracle Depot Repair
- CVE-2026-83431 Missing authorization in Oracle Product Workbench
- CVE-2026-83430 Missing authorization in Oracle Product Workbench
- CVE-2026-83429 Missing authorization in Oracle Demand Signal Repository
- CVE-2026-83428 Missing authorization in Oracle Demand Signal Repository
- CVE-2026-83427 Missing authorization in PeopleSoft Enterprise PeopleTools
- CVE-2026-83426 Auth bypass in Oracle Access Manager
- CVE-2026-83425 Information disclosure in Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-83424 Information disclosure in Oracle JDeveloper
- CVE-2026-83423 Privilege escalation in Oracle JDeveloper
- CVE-2026-83422 Missing authorization in Oracle Identity Manager
- CVE-2026-83420 Privilege escalation in PeopleSoft Enterprise FIN Engineering Brazil
- CVE-2026-83419 Information disclosure in Oracle Communications Cloud Native Core Security Edge Protection Proxy
- CVE-2026-83418 Missing authorization in Oracle Communications Cloud Native Core Security Edge Protection Proxy
- CVE-2026-83417 Information disclosure in Oracle Communications Cloud Native Core Security Edge Protection Proxy
- CVE-2026-83416 Denial of service in Oracle Coherence
- CVE-2026-83415 Privilege escalation in Oracle Coherence
- CVE-2026-83414 Information disclosure in Oracle Coherence
- CVE-2026-83413 Missing authorization in Oracle Coherence
- CVE-2026-83412 Missing authorization in Oracle Coherence
- CVE-2026-83411 Privilege escalation in Oracle Coherence
- CVE-2026-83410 Privilege escalation in Oracle Coherence
- CVE-2026-83409 Auth bypass in Oracle Access Manager
- CVE-2026-83408 Code injection in Oracle GraalVM for JDK, Oracle GraalVM
- CVE-2026-83407 Missing authorization in Oracle Access Manager
- CVE-2026-83406 Missing authorization in Oracle Communications Billing and Revenue Management
- CVE-2026-83404 Missing authorization in MySQL Connectors
- CVE-2026-83403 Missing authorization in Oracle Identity Manager
- CVE-2026-83402 Missing authorization in Oracle Identity Manager
- CVE-2026-83401 Missing authorization in Oracle Identity Manager
- CVE-2026-83400 Denial of service in Oracle GraalVM Enterprise Edition
- CVE-2026-8340 Concrete CMS 9.5.0 and below is vulnerable to CSRF via Backend\File::approveVersion
- CVE-2026-83399 Auth bypass in Oracle WebLogic Server
- CVE-2026-83398 Missing authorization in Oracle Data Integrator
- CVE-2026-83397 Auth bypass in Oracle Data Integrator
- CVE-2026-83396 Auth bypass in Oracle Data Integrator
- CVE-2026-83395 Other in Oracle GraalVM Enterprise Edition
- CVE-2026-83394 Information disclosure in Oracle Demand Planning
- CVE-2026-83393 Missing authorization in Oracle Product Hub
- CVE-2026-83392 Information disclosure in Oracle Applications Manager
- CVE-2026-83391 Information disclosure in Oracle HRMS (US)
- CVE-2026-83390 Information disclosure in Oracle Applications Manager
- CVE-2026-8339 SQL Injection in Coverity Connect SOAP API
- CVE-2026-83389 Information disclosure in Oracle HRMS (UK)
- CVE-2026-83388 Information disclosure in Oracle Applications Manager
- CVE-2026-83387 Information disclosure in Oracle GraalVM Enterprise Edition
- CVE-2026-83386 Information disclosure in Oracle HRMS (US)
- CVE-2026-83385 Information disclosure in Oracle HRMS (US)
- CVE-2026-83384 Information disclosure in Oracle HRMS (US)
- CVE-2026-83383 Information disclosure in Oracle HRMS (US)
- CVE-2026-83382 Information disclosure in Oracle Report Manager
- CVE-2026-83381 Information disclosure in Oracle Java SE
- CVE-2026-83380 Information disclosure in Oracle GraalVM Enterprise Edition
- CVE-2026-8338 Authentication and Authorization Bypass in Coverity Connect
- CVE-2026-83379 Missing authorization in Oracle Weblogic Server Proxy Plug-in
- CVE-2026-83378 Other in Oracle Java SE
- CVE-2026-83377 Information disclosure in Oracle HRMS (US)
- CVE-2026-83376 Information disclosure in Oracle GraalVM Enterprise Edition
- CVE-2026-83375 Information disclosure in PeopleSoft Enterprise HCM Human Resources
- CVE-2026-83374 Other in Oracle GraalVM Enterprise Edition
- CVE-2026-83373 Information disclosure in PeopleSoft Enterprise PeopleTools
- CVE-2026-83372 Information disclosure in PeopleSoft Enterprise PeopleTools
- CVE-2026-83371 Information disclosure in Oracle HRMS (UK)
- CVE-2026-83370 Information disclosure in Sourcing
- CVE-2026-8337 Concrete CMS is vulnerable to IDOR in surveys