# Vulnerabilities published in 2026


- [CVE-2026-83369](https://insights.sbomify.com/CVE-2026-83369/): Denial of service in Oracle Access Manager (low 3.1)
- [CVE-2026-83368](https://insights.sbomify.com/CVE-2026-83368/): Other in Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM (high 7.0)
- [CVE-2026-83367](https://insights.sbomify.com/CVE-2026-83367/): Information disclosure in Oracle Shipping Execution (high 7.4)
- [CVE-2026-83366](https://insights.sbomify.com/CVE-2026-83366/): Missing authorization in Oracle Shipping Execution (high 7.4)
- [CVE-2026-83363](https://insights.sbomify.com/CVE-2026-83363/): Missing authorization in Oracle Contract Lifecycle Management for Public Sector (high 8.8)
- [CVE-2026-83361](https://insights.sbomify.com/CVE-2026-83361/): Missing authorization in Oracle Contract Lifecycle Management for Public Sector (high 8.1)
- [CVE-2026-83360](https://insights.sbomify.com/CVE-2026-83360/): Information disclosure in Oracle HRMS (Republic of Korea) (medium 6.5)
- [CVE-2026-8336](https://insights.sbomify.com/CVE-2026-8336/): Post-authentication use-after-free error in $_internalJsEmit and mapreduce commands (high 7.7)
- [CVE-2026-83359](https://insights.sbomify.com/CVE-2026-83359/): Information disclosure in Oracle HRMS (India) (medium 6.5)
- [CVE-2026-83358](https://insights.sbomify.com/CVE-2026-83358/): Information disclosure in Oracle HRMS (Norway) (medium 6.5)
- [CVE-2026-83357](https://insights.sbomify.com/CVE-2026-83357/): Path traversal in Oracle GraalVM for JDK, Oracle GraalVM (high 8.1)
- [CVE-2026-83356](https://insights.sbomify.com/CVE-2026-83356/): Missing authorization in Enterprise Command Center Framework (high 7.7)
- [CVE-2026-83355](https://insights.sbomify.com/CVE-2026-83355/): Auth bypass in Oracle Enterprise Manager for Fusion Middleware (critical 9.8)
- [CVE-2026-83354](https://insights.sbomify.com/CVE-2026-83354/): Information disclosure in Oracle Coherence (medium 6.3)
- [CVE-2026-83353](https://insights.sbomify.com/CVE-2026-83353/): Privilege escalation in Oracle WebCenter Content (high 7.8)
- [CVE-2026-83352](https://insights.sbomify.com/CVE-2026-83352/): Information disclosure in Oracle XML Gateway (high 7.1)
- [CVE-2026-83351](https://insights.sbomify.com/CVE-2026-83351/): Privilege escalation in Oracle Database Server (high 8.1)
- [CVE-2026-83350](https://insights.sbomify.com/CVE-2026-83350/): Denial of service in Oracle Database Server (high 7.5)
- [CVE-2026-8335](https://insights.sbomify.com/CVE-2026-8335/): Missing authentication in Aix-DB (high 7.1)
- [CVE-2026-83349](https://insights.sbomify.com/CVE-2026-83349/): Denial of service in Oracle Database Server (high 7.5)
- [CVE-2026-83348](https://insights.sbomify.com/CVE-2026-83348/): Privilege escalation in Oracle Database Server (high 8.8)
- [CVE-2026-83347](https://insights.sbomify.com/CVE-2026-83347/): Denial of service in Oracle Database Server (medium 6.5)
- [CVE-2026-83346](https://insights.sbomify.com/CVE-2026-83346/): Missing authorization in Oracle Fusion Middleware Control (medium 5.4)
- [CVE-2026-83345](https://insights.sbomify.com/CVE-2026-83345/): Denial of service in Oracle XML Gateway (high 7.1)
- [CVE-2026-83344](https://insights.sbomify.com/CVE-2026-83344/): Privilege escalation in Oracle Identity Manager Connector (high 7.2)
- [CVE-2026-83343](https://insights.sbomify.com/CVE-2026-83343/): Missing authorization in Oracle Utilities Network Management System (high 8.2)
- [CVE-2026-83342](https://insights.sbomify.com/CVE-2026-83342/): Privilege escalation in Oracle Utilities Network Management System (high 7.8)
- [CVE-2026-83341](https://insights.sbomify.com/CVE-2026-83341/): Missing authorization in Oracle Applications Manager (high 7.5)
- [CVE-2026-83340](https://insights.sbomify.com/CVE-2026-83340/): Privilege escalation in Oracle Identity Manager (high 8.8)
- [CVE-2026-83339](https://insights.sbomify.com/CVE-2026-83339/): Auth bypass in Oracle WebCenter Enterprise Capture (critical 9.8)
- [CVE-2026-83338](https://insights.sbomify.com/CVE-2026-83338/): Privilege escalation in Oracle Applications Manager (high 8.8)
- [CVE-2026-83337](https://insights.sbomify.com/CVE-2026-83337/): Privilege escalation in Oracle Middleware Common Libraries and Tools (high 7.8)
- [CVE-2026-83336](https://insights.sbomify.com/CVE-2026-83336/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.8)
- [CVE-2026-83335](https://insights.sbomify.com/CVE-2026-83335/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 8.8)
- [CVE-2026-83334](https://insights.sbomify.com/CVE-2026-83334/): Missing authorization in Oracle Web Services Manager (high 7.4)
- [CVE-2026-83333](https://insights.sbomify.com/CVE-2026-83333/): Denial of service in Oracle Database Server (high 7.5)
- [CVE-2026-83332](https://insights.sbomify.com/CVE-2026-83332/): Missing authorization in Oracle Applications Framework (high 7.1)
- [CVE-2026-83331](https://insights.sbomify.com/CVE-2026-83331/): Privilege escalation in Oracle Applications Framework (high 8.8)
- [CVE-2026-83330](https://insights.sbomify.com/CVE-2026-83330/): Denial of service in Helidon (high 7.5)
- [CVE-2026-83329](https://insights.sbomify.com/CVE-2026-83329/): Privilege escalation in Oracle Applications Framework (high 8.8)
- [CVE-2026-83328](https://insights.sbomify.com/CVE-2026-83328/): Privilege escalation in Oracle Applications Framework (high 7.2)
- [CVE-2026-83327](https://insights.sbomify.com/CVE-2026-83327/): Auth bypass in Oracle Applications Framework (critical 9.8)
- [CVE-2026-83326](https://insights.sbomify.com/CVE-2026-83326/): Information disclosure in Siebel CRM Integration (high 7.5)
- [CVE-2026-83325](https://insights.sbomify.com/CVE-2026-83325/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.2)
- [CVE-2026-83324](https://insights.sbomify.com/CVE-2026-83324/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.1)
- [CVE-2026-83323](https://insights.sbomify.com/CVE-2026-83323/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.5)
- [CVE-2026-83322](https://insights.sbomify.com/CVE-2026-83322/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.2)
- [CVE-2026-83321](https://insights.sbomify.com/CVE-2026-83321/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 8.5)
- [CVE-2026-83320](https://insights.sbomify.com/CVE-2026-83320/): Open redirect in Oracle BI Publisher (high 7.6)
- [CVE-2026-83319](https://insights.sbomify.com/CVE-2026-83319/): Missing authorization in Oracle BI Publisher (high 7.7)
- [CVE-2026-83318](https://insights.sbomify.com/CVE-2026-83318/): Privilege escalation in Oracle BI Publisher (high 7.5)
- [CVE-2026-83317](https://insights.sbomify.com/CVE-2026-83317/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.8)
- [CVE-2026-83316](https://insights.sbomify.com/CVE-2026-83316/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.0)
- [CVE-2026-83315](https://insights.sbomify.com/CVE-2026-83315/): Privilege escalation in Oracle BI Publisher (high 8.8)
- [CVE-2026-83314](https://insights.sbomify.com/CVE-2026-83314/): Missing authorization in Oracle BI Publisher (high 8.1)
- [CVE-2026-83313](https://insights.sbomify.com/CVE-2026-83313/): Missing authorization in Oracle BI Publisher (high 7.7)
- [CVE-2026-83312](https://insights.sbomify.com/CVE-2026-83312/): Missing authorization in Oracle BI Publisher (high 7.7)
- [CVE-2026-83311](https://insights.sbomify.com/CVE-2026-83311/): Missing authorization in Oracle BI Publisher (high 8.5)
- [CVE-2026-83310](https://insights.sbomify.com/CVE-2026-83310/): Missing authorization in Oracle BI Publisher (high 8.7)
- [CVE-2026-83309](https://insights.sbomify.com/CVE-2026-83309/): Missing authorization in Oracle BI Publisher (high 8.5)
- [CVE-2026-83308](https://insights.sbomify.com/CVE-2026-83308/): Missing authorization in Oracle BI Publisher (high 8.1)
- [CVE-2026-83307](https://insights.sbomify.com/CVE-2026-83307/): Missing authorization in Oracle BI Publisher (high 8.3)
- [CVE-2026-83306](https://insights.sbomify.com/CVE-2026-83306/): Privilege escalation in Oracle JDeveloper (high 8.8)
- [CVE-2026-83305](https://insights.sbomify.com/CVE-2026-83305/): Missing authorization in Oracle BI Publisher (high 8.6)
- [CVE-2026-83304](https://insights.sbomify.com/CVE-2026-83304/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 8.9)
- [CVE-2026-83303](https://insights.sbomify.com/CVE-2026-83303/): Missing authorization in Oracle BI Publisher (high 8.5)
- [CVE-2026-83302](https://insights.sbomify.com/CVE-2026-83302/): Information disclosure in Oracle BI Publisher (high 8.5)
- [CVE-2026-83301](https://insights.sbomify.com/CVE-2026-83301/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 8.8)
- [CVE-2026-83300](https://insights.sbomify.com/CVE-2026-83300/): Information disclosure in Oracle XML Gateway (high 7.1)
- [CVE-2026-8330](https://insights.sbomify.com/CVE-2026-8330/): Insertion of Sensitive Information into Log File in GitLab (medium 4.4)
- [CVE-2026-83299](https://insights.sbomify.com/CVE-2026-83299/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 8.1)
- [CVE-2026-83298](https://insights.sbomify.com/CVE-2026-83298/): Privilege escalation in Oracle BI Publisher (high 7.2)
- [CVE-2026-83297](https://insights.sbomify.com/CVE-2026-83297/): Missing authorization in Oracle BI Publisher (high 8.1)
- [CVE-2026-83296](https://insights.sbomify.com/CVE-2026-83296/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.5)
- [CVE-2026-83295](https://insights.sbomify.com/CVE-2026-83295/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.5)
- [CVE-2026-83294](https://insights.sbomify.com/CVE-2026-83294/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.8)
- [CVE-2026-83293](https://insights.sbomify.com/CVE-2026-83293/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.8)
- [CVE-2026-83292](https://insights.sbomify.com/CVE-2026-83292/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.5)
- [CVE-2026-83291](https://insights.sbomify.com/CVE-2026-83291/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.8)
- [CVE-2026-83290](https://insights.sbomify.com/CVE-2026-83290/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.8)
- [CVE-2026-83289](https://insights.sbomify.com/CVE-2026-83289/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.5)
- [CVE-2026-83288](https://insights.sbomify.com/CVE-2026-83288/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.8)
- [CVE-2026-83287](https://insights.sbomify.com/CVE-2026-83287/): Information disclosure in Oracle Business Intelligence Enterprise Edition (high 7.7)
- [CVE-2026-83286](https://insights.sbomify.com/CVE-2026-83286/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 8.1)
- [CVE-2026-83285](https://insights.sbomify.com/CVE-2026-83285/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 8.3)
- [CVE-2026-83284](https://insights.sbomify.com/CVE-2026-83284/): Missing authorization in Oracle BI Publisher (high 8.6)
- [CVE-2026-83283](https://insights.sbomify.com/CVE-2026-83283/): Auth bypass in Oracle Business Intelligence Enterprise Edition (critical 9.8)
- [CVE-2026-83282](https://insights.sbomify.com/CVE-2026-83282/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (critical 9.9)
- [CVE-2026-83281](https://insights.sbomify.com/CVE-2026-83281/): Denial of service in Helidon (high 7.5)
- [CVE-2026-83280](https://insights.sbomify.com/CVE-2026-83280/): Denial of service in Helidon (high 7.5)
- [CVE-2026-8328](https://insights.sbomify.com/CVE-2026-8328/): FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address (medium 5.9)
- [CVE-2026-83279](https://insights.sbomify.com/CVE-2026-83279/): Information disclosure in Oracle Agile PLM MCAD Connector (medium 5.5)
- [CVE-2026-83278](https://insights.sbomify.com/CVE-2026-83278/): Missing authorization in Helidon (medium 6.8)
- [CVE-2026-83277](https://insights.sbomify.com/CVE-2026-83277/): Information disclosure in Oracle Agile PLM MCAD Connector (high 7.3)
- [CVE-2026-83276](https://insights.sbomify.com/CVE-2026-83276/): Denial of service in Helidon (high 7.5)
- [CVE-2026-83274](https://insights.sbomify.com/CVE-2026-83274/): Information disclosure in Oracle Agile PLM MCAD Connector (medium 5.5)
- [CVE-2026-83273](https://insights.sbomify.com/CVE-2026-83273/): Privilege escalation in Oracle Business Intelligence Enterprise Edition (high 7.2)
- [CVE-2026-83272](https://insights.sbomify.com/CVE-2026-83272/): Privilege escalation in Oracle Database Server (high 8.5)
- [CVE-2026-83271](https://insights.sbomify.com/CVE-2026-83271/): Privilege escalation in Oracle Database Server (high 8.8)
- [CVE-2026-83270](https://insights.sbomify.com/CVE-2026-83270/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/325/