# Vulnerabilities published in 2026


- [CVE-2026-8327](https://insights.sbomify.com/CVE-2026-8327/): Concrete CMS has a session-hardening bypass and allows password change without reauthorization (medium 5.3)
- [CVE-2026-83269](https://insights.sbomify.com/CVE-2026-83269/): Auth bypass in Oracle BI Publisher (critical 9.8)
- [CVE-2026-83268](https://insights.sbomify.com/CVE-2026-83268/): Privilege escalation in Oracle BI Publisher (critical 9.1)
- [CVE-2026-83267](https://insights.sbomify.com/CVE-2026-83267/): Missing authorization in Oracle BI Publisher (high 8.5)
- [CVE-2026-83266](https://insights.sbomify.com/CVE-2026-83266/): Missing authorization in Oracle JDeveloper (high 8.2)
- [CVE-2026-83265](https://insights.sbomify.com/CVE-2026-83265/): Missing authorization in Oracle Web Services Manager (high 8.2)
- [CVE-2026-83264](https://insights.sbomify.com/CVE-2026-83264/): Missing authorization in Oracle Product Lifecycle Analytics (high 8.4)
- [CVE-2026-83263](https://insights.sbomify.com/CVE-2026-83263/): Privilege escalation in Oracle Product Lifecycle Analytics (high 7.5)
- [CVE-2026-83262](https://insights.sbomify.com/CVE-2026-83262/): Privilege escalation in Oracle Product Lifecycle Analytics (high 7.5)
- [CVE-2026-83261](https://insights.sbomify.com/CVE-2026-83261/): Auth bypass in Oracle Product Lifecycle Analytics (critical 9.8)
- [CVE-2026-83260](https://insights.sbomify.com/CVE-2026-83260/): Privilege escalation in Oracle Agile PLM (critical 9.1)
- [CVE-2026-8326](https://insights.sbomify.com/CVE-2026-8326/): Remote Spark SparkView Path Traversal in RDP Drive Redirection leading to RCE (critical 10.0)
- [CVE-2026-83259](https://insights.sbomify.com/CVE-2026-83259/): Information disclosure in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.1)
- [CVE-2026-83258](https://insights.sbomify.com/CVE-2026-83258/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.1)
- [CVE-2026-83257](https://insights.sbomify.com/CVE-2026-83257/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5)
- [CVE-2026-83256](https://insights.sbomify.com/CVE-2026-83256/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.1)
- [CVE-2026-83255](https://insights.sbomify.com/CVE-2026-83255/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.1)
- [CVE-2026-83254](https://insights.sbomify.com/CVE-2026-83254/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.1)
- [CVE-2026-83253](https://insights.sbomify.com/CVE-2026-83253/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.8)
- [CVE-2026-83252](https://insights.sbomify.com/CVE-2026-83252/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.0)
- [CVE-2026-83251](https://insights.sbomify.com/CVE-2026-83251/): Denial of service in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.5)
- [CVE-2026-83250](https://insights.sbomify.com/CVE-2026-83250/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.5)
- [CVE-2026-8325](https://insights.sbomify.com/CVE-2026-8325/): PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products (high 7.8)
- [CVE-2026-83249](https://insights.sbomify.com/CVE-2026-83249/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.8)
- [CVE-2026-83248](https://insights.sbomify.com/CVE-2026-83248/): Denial of service in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.2)
- [CVE-2026-83247](https://insights.sbomify.com/CVE-2026-83247/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.8)
- [CVE-2026-83246](https://insights.sbomify.com/CVE-2026-83246/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.1)
- [CVE-2026-83245](https://insights.sbomify.com/CVE-2026-83245/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.1)
- [CVE-2026-83244](https://insights.sbomify.com/CVE-2026-83244/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.1)
- [CVE-2026-83243](https://insights.sbomify.com/CVE-2026-83243/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.7)
- [CVE-2026-83242](https://insights.sbomify.com/CVE-2026-83242/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.3)
- [CVE-2026-83241](https://insights.sbomify.com/CVE-2026-83241/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5)
- [CVE-2026-83240](https://insights.sbomify.com/CVE-2026-83240/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.1)
- [CVE-2026-83239](https://insights.sbomify.com/CVE-2026-83239/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.0)
- [CVE-2026-83238](https://insights.sbomify.com/CVE-2026-83238/): Information disclosure in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.1)
- [CVE-2026-83237](https://insights.sbomify.com/CVE-2026-83237/): Information disclosure in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.1)
- [CVE-2026-83236](https://insights.sbomify.com/CVE-2026-83236/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.2)
- [CVE-2026-83235](https://insights.sbomify.com/CVE-2026-83235/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5)
- [CVE-2026-83234](https://insights.sbomify.com/CVE-2026-83234/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.2)
- [CVE-2026-83233](https://insights.sbomify.com/CVE-2026-83233/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.7)
- [CVE-2026-83232](https://insights.sbomify.com/CVE-2026-83232/): Auth bypass in Oracle Data Integrator (critical 9.8)
- [CVE-2026-83231](https://insights.sbomify.com/CVE-2026-83231/): Missing authorization in Helidon (high 7.0)
- [CVE-2026-83230](https://insights.sbomify.com/CVE-2026-83230/): Missing authorization in Siebel CRM Deployment (high 7.1)
- [CVE-2026-8323](https://insights.sbomify.com/CVE-2026-8323/): Open Redirect in Armiya Information Technologies' Access Control System (critical 9.3)
- [CVE-2026-83229](https://insights.sbomify.com/CVE-2026-83229/): Missing authorization in Siebel CRM Deployment (critical 9.1)
- [CVE-2026-83228](https://insights.sbomify.com/CVE-2026-83228/): Denial of service in Siebel CRM Deployment (high 7.5)
- [CVE-2026-83227](https://insights.sbomify.com/CVE-2026-83227/): Missing authorization in Siebel CRM Integration (high 7.5)
- [CVE-2026-83226](https://insights.sbomify.com/CVE-2026-83226/): Missing authorization in Siebel CRM Deployment (high 7.5)
- [CVE-2026-83225](https://insights.sbomify.com/CVE-2026-83225/): Denial of service in Siebel CRM Deployment (high 7.5)
- [CVE-2026-83224](https://insights.sbomify.com/CVE-2026-83224/): Missing authorization in Siebel CRM Deployment (high 7.1)
- [CVE-2026-83223](https://insights.sbomify.com/CVE-2026-83223/): Missing authorization in Siebel CRM Deployment (high 7.5)
- [CVE-2026-83222](https://insights.sbomify.com/CVE-2026-83222/): Denial of service in Siebel CRM Deployment (high 7.5)
- [CVE-2026-83221](https://insights.sbomify.com/CVE-2026-83221/): Missing authorization in Siebel CRM Integration (high 7.1)
- [CVE-2026-83220](https://insights.sbomify.com/CVE-2026-83220/): Missing authorization in Siebel CRM Integration (high 8.1)
- [CVE-2026-83219](https://insights.sbomify.com/CVE-2026-83219/): Missing authorization in Siebel CRM Deployment (high 7.1)
- [CVE-2026-83218](https://insights.sbomify.com/CVE-2026-83218/): Missing authorization in Siebel CRM Deployment (high 7.4)
- [CVE-2026-83217](https://insights.sbomify.com/CVE-2026-83217/): Missing authorization in Siebel CRM End User (high 7.1)
- [CVE-2026-83216](https://insights.sbomify.com/CVE-2026-83216/): Privilege escalation in Siebel CRM Deployment (high 7.8)
- [CVE-2026-83215](https://insights.sbomify.com/CVE-2026-83215/): Missing authorization in Siebel CRM Deployment (high 8.2)
- [CVE-2026-83214](https://insights.sbomify.com/CVE-2026-83214/): Privilege escalation in Siebel CRM Deployment (high 7.8)
- [CVE-2026-83213](https://insights.sbomify.com/CVE-2026-83213/): Missing authorization in Siebel CRM End User (high 7.5)
- [CVE-2026-83212](https://insights.sbomify.com/CVE-2026-83212/): Privilege escalation in Siebel Apps - Self Service (high 8.8)
- [CVE-2026-83211](https://insights.sbomify.com/CVE-2026-83211/): Privilege escalation in Siebel CRM Deployment (high 7.8)
- [CVE-2026-83210](https://insights.sbomify.com/CVE-2026-83210/): SQL injection in Siebel CRM Deployment (high 8.8)
- [CVE-2026-8321](https://insights.sbomify.com/CVE-2026-8321/): inkeep agents runAuth Middleware runAuth.ts createDevContext authentication bypass (medium 6.9)
- [CVE-2026-83209](https://insights.sbomify.com/CVE-2026-83209/): Missing authorization in Siebel CRM Development (high 8.8)
- [CVE-2026-83208](https://insights.sbomify.com/CVE-2026-83208/): SQL injection in Siebel CRM Deployment (high 8.8)
- [CVE-2026-83207](https://insights.sbomify.com/CVE-2026-83207/): Missing authorization in Siebel CRM Development (high 7.6)
- [CVE-2026-83206](https://insights.sbomify.com/CVE-2026-83206/): Missing authorization in Oracle Banking Corporate Lending Process Management (high 7.1)
- [CVE-2026-83205](https://insights.sbomify.com/CVE-2026-83205/): Missing authorization in Oracle Applications Framework (high 8.8)
- [CVE-2026-83204](https://insights.sbomify.com/CVE-2026-83204/): Missing authorization in Oracle Sourcing (high 7.5)
- [CVE-2026-83203](https://insights.sbomify.com/CVE-2026-83203/): Missing authorization in Siebel CRM End User (high 8.6)
- [CVE-2026-83202](https://insights.sbomify.com/CVE-2026-83202/): Auth bypass in Siebel CRM Deployment (critical 9.1)
- [CVE-2026-83201](https://insights.sbomify.com/CVE-2026-83201/): Auth bypass in Siebel CRM Deployment (critical 9.1)
- [CVE-2026-83200](https://insights.sbomify.com/CVE-2026-83200/): Missing authorization in Oracle Process Manufacturing Intelligence (medium 6.5)
- [CVE-2026-8320](https://insights.sbomify.com/CVE-2026-8320/): jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgery (medium 5.1)
- [CVE-2026-83199](https://insights.sbomify.com/CVE-2026-83199/): Missing authorization in Siebel CRM Deployment (high 8.8)
- [CVE-2026-83198](https://insights.sbomify.com/CVE-2026-83198/): Open redirect in Oracle Field Service (medium 5.4)
- [CVE-2026-83197](https://insights.sbomify.com/CVE-2026-83197/): Missing authorization in Siebel Apps - Financial Services (critical 9.1)
- [CVE-2026-83196](https://insights.sbomify.com/CVE-2026-83196/): Privilege escalation in Siebel CRM Deployment (critical 9.1)
- [CVE-2026-83195](https://insights.sbomify.com/CVE-2026-83195/): Privilege escalation in Siebel CRM Deployment (high 7.2)
- [CVE-2026-83194](https://insights.sbomify.com/CVE-2026-83194/): Privilege escalation in Oracle Depot Repair (high 8.8)
- [CVE-2026-83193](https://insights.sbomify.com/CVE-2026-83193/): Privilege escalation in Siebel Apps - Life Sciences (high 7.3)
- [CVE-2026-83192](https://insights.sbomify.com/CVE-2026-83192/): Privilege escalation in Siebel CRM End User (high 8.1)
- [CVE-2026-83191](https://insights.sbomify.com/CVE-2026-83191/): Privilege escalation in Siebel CRM Deployment (high 8.1)
- [CVE-2026-83190](https://insights.sbomify.com/CVE-2026-83190/): Privilege escalation in Siebel CRM Deployment (high 7.3)
- [CVE-2026-8319](https://insights.sbomify.com/CVE-2026-8319/): aiwaves-cn agents cheshire_cat_core stray_cat.py recall_relevant_memories_to_working_memory resource consumption (medium 6.9)
- [CVE-2026-83189](https://insights.sbomify.com/CVE-2026-83189/): Privilege escalation in Oracle User Management (high 8.8)
- [CVE-2026-83188](https://insights.sbomify.com/CVE-2026-83188/): Missing authorization in Oracle Depot Repair (high 7.2)
- [CVE-2026-83187](https://insights.sbomify.com/CVE-2026-83187/): Missing authorization in Oracle Common Applications Calendar (high 7.1)
- [CVE-2026-83186](https://insights.sbomify.com/CVE-2026-83186/): Missing authorization in Oracle Common Applications Calendar (high 7.1)
- [CVE-2026-83185](https://insights.sbomify.com/CVE-2026-83185/): Missing authorization in Oracle Common Applications (high 7.3)
- [CVE-2026-83184](https://insights.sbomify.com/CVE-2026-83184/): Missing authorization in Oracle Application Object Library (high 7.4)
- [CVE-2026-83183](https://insights.sbomify.com/CVE-2026-83183/): Denial of service in Siebel CRM Deployment (high 7.5)
- [CVE-2026-83182](https://insights.sbomify.com/CVE-2026-83182/): Missing authorization in Siebel CRM Development (high 7.5)
- [CVE-2026-83181](https://insights.sbomify.com/CVE-2026-83181/): Missing authorization in Siebel CRM Development (high 8.2)
- [CVE-2026-83180](https://insights.sbomify.com/CVE-2026-83180/): Missing authorization in Siebel CRM Deployment (high 8.8)
- [CVE-2026-8318](https://insights.sbomify.com/CVE-2026-8318/): VectifyAI PageIndex PDF Table of Contents page_index.py toc_transformer infinite loop (medium 6.9)
- [CVE-2026-83179](https://insights.sbomify.com/CVE-2026-83179/): Missing authorization in Oracle Common Applications Calendar (high 7.1)
- [CVE-2026-83178](https://insights.sbomify.com/CVE-2026-83178/): Missing authorization in Oracle Application Object Library (high 8.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/326/