# Vulnerabilities published in 2026 - [CVE-2026-83177](https://insights.sbomify.com/CVE-2026-83177/): Missing authorization in Oracle One-to-One Fulfillment (high 8.1) - [CVE-2026-83176](https://insights.sbomify.com/CVE-2026-83176/): Privilege escalation in Oracle Common Applications (high 7.2) - [CVE-2026-83175](https://insights.sbomify.com/CVE-2026-83175/): Information disclosure in Oracle Application Object Library (medium 6.5) - [CVE-2026-83174](https://insights.sbomify.com/CVE-2026-83174/): Missing authorization in Oracle CRM Technical Foundation (high 8.1) - [CVE-2026-83173](https://insights.sbomify.com/CVE-2026-83173/): Missing authorization in Oracle One-to-One Fulfillment (high 7.1) - [CVE-2026-83172](https://insights.sbomify.com/CVE-2026-83172/): Missing authorization in Oracle Sales Online (high 8.5) - [CVE-2026-83171](https://insights.sbomify.com/CVE-2026-83171/): Missing authorization in Oracle One-to-One Fulfillment (high 7.1) - [CVE-2026-83170](https://insights.sbomify.com/CVE-2026-83170/): Privilege escalation in Oracle One-to-One Fulfillment (high 8.0) - [CVE-2026-83169](https://insights.sbomify.com/CVE-2026-83169/): Privilege escalation in Oracle One-to-One Fulfillment (high 8.1) - [CVE-2026-83168](https://insights.sbomify.com/CVE-2026-83168/): Privilege escalation in Oracle Applications Manager (high 8.8) - [CVE-2026-83167](https://insights.sbomify.com/CVE-2026-83167/): Information disclosure in Oracle Application Object Library (high 7.5) - [CVE-2026-83166](https://insights.sbomify.com/CVE-2026-83166/): Missing authorization in Oracle Customer Interaction History (high 7.7) - [CVE-2026-83165](https://insights.sbomify.com/CVE-2026-83165/): Missing authorization in Oracle Customer Interaction History (high 8.8) - [CVE-2026-83164](https://insights.sbomify.com/CVE-2026-83164/): Missing authorization in Oracle Customer Interaction History (high 8.8) - [CVE-2026-83163](https://insights.sbomify.com/CVE-2026-83163/): Missing authorization in Oracle Application Object Library (high 8.8) - [CVE-2026-83162](https://insights.sbomify.com/CVE-2026-83162/): Missing authorization in Oracle Application Object Library (high 7.4) - [CVE-2026-83161](https://insights.sbomify.com/CVE-2026-83161/): Missing authorization in Oracle Project Intelligence (high 7.1) - [CVE-2026-83160](https://insights.sbomify.com/CVE-2026-83160/): Missing authorization in Oracle Database Server (high 8.8) - [CVE-2026-83159](https://insights.sbomify.com/CVE-2026-83159/): Other in Applications DBA (high 7.8) - [CVE-2026-83158](https://insights.sbomify.com/CVE-2026-83158/): Missing authorization in Oracle Applications Manager (high 7.1) - [CVE-2026-83157](https://insights.sbomify.com/CVE-2026-83157/): Missing authorization in Oracle Applications Manager (high 8.0) - [CVE-2026-83156](https://insights.sbomify.com/CVE-2026-83156/): Missing authorization in Oracle Database Server (high 7.5) - [CVE-2026-83155](https://insights.sbomify.com/CVE-2026-83155/): Missing authorization in Siebel CRM Deployment (high 7.3) - [CVE-2026-83154](https://insights.sbomify.com/CVE-2026-83154/): Auth bypass in Siebel CRM End User (critical 9.1) - [CVE-2026-83153](https://insights.sbomify.com/CVE-2026-83153/): Missing authorization in Siebel CRM Deployment (high 8.8) - [CVE-2026-83152](https://insights.sbomify.com/CVE-2026-83152/): Missing authorization in Oracle Project Intelligence (high 8.1) - [CVE-2026-83151](https://insights.sbomify.com/CVE-2026-83151/): Auth bypass in Service Delivery Platform (critical 9.8) - [CVE-2026-83150](https://insights.sbomify.com/CVE-2026-83150/): Privilege escalation in Oracle Application Testing Suite (high 7.0) - [CVE-2026-8315](https://insights.sbomify.com/CVE-2026-8315/): Stored XSS in Webbeyaz's Mediküm Web (medium 5.4) - [CVE-2026-83149](https://insights.sbomify.com/CVE-2026-83149/): Missing authorization in Oracle Application Testing Suite (critical 9.1) - [CVE-2026-83148](https://insights.sbomify.com/CVE-2026-83148/): Privilege escalation in Oracle Application Testing Suite (high 8.8) - [CVE-2026-83147](https://insights.sbomify.com/CVE-2026-83147/): Privilege escalation in PeopleSoft Enterprise FIN Inventory Brazil (high 7.8) - [CVE-2026-83146](https://insights.sbomify.com/CVE-2026-83146/): Missing authorization in Siebel CRM End User (high 7.7) - [CVE-2026-83145](https://insights.sbomify.com/CVE-2026-83145/): Missing authorization in Siebel Apps - Customer Order Management (high 8.7) - [CVE-2026-83144](https://insights.sbomify.com/CVE-2026-83144/): Missing authorization in Siebel Apps - Customer Order Management (high 8.7) - [CVE-2026-83143](https://insights.sbomify.com/CVE-2026-83143/): Missing authorization in Siebel Apps - Life Sciences (high 8.1) - [CVE-2026-83142](https://insights.sbomify.com/CVE-2026-83142/): Missing authorization in Oracle Proposals (high 7.7) - [CVE-2026-83141](https://insights.sbomify.com/CVE-2026-83141/): Missing authorization in Oracle Field Service (high 7.7) - [CVE-2026-83140](https://insights.sbomify.com/CVE-2026-83140/): Missing authorization in Oracle Field Service (medium 6.5) - [CVE-2026-8314](https://insights.sbomify.com/CVE-2026-8314/): Rockwell Automation Arena® - Memory Corruption Vulnerability (high 7.0) - [CVE-2026-83139](https://insights.sbomify.com/CVE-2026-83139/): Information disclosure in Oracle Order Management (medium 6.5) - [CVE-2026-83138](https://insights.sbomify.com/CVE-2026-83138/): Missing authorization in Oracle Spares Management (high 8.0) - [CVE-2026-83137](https://insights.sbomify.com/CVE-2026-83137/): Missing authorization in Oracle Spares Management (high 8.8) - [CVE-2026-83136](https://insights.sbomify.com/CVE-2026-83136/): Missing authorization in Oracle Spares Management (high 8.8) - [CVE-2026-83135](https://insights.sbomify.com/CVE-2026-83135/): Missing authorization in Oracle iStore (high 8.7) - [CVE-2026-83134](https://insights.sbomify.com/CVE-2026-83134/): Missing authorization in Oracle iStore (high 7.7) - [CVE-2026-83133](https://insights.sbomify.com/CVE-2026-83133/): Missing authorization in Oracle iStore (high 7.5) - [CVE-2026-83132](https://insights.sbomify.com/CVE-2026-83132/): Missing authorization in Oracle iStore (high 8.1) - [CVE-2026-83131](https://insights.sbomify.com/CVE-2026-83131/): Missing authorization in Oracle Web Applications Desktop Integrator (high 7.7) - [CVE-2026-83130](https://insights.sbomify.com/CVE-2026-83130/): Missing authorization in Oracle Site Hub (high 7.1) - [CVE-2026-8313](https://insights.sbomify.com/CVE-2026-8313/): Rockwell Automation Arena® - Memory Corruption Vulnerability (high 7.0) - [CVE-2026-83129](https://insights.sbomify.com/CVE-2026-83129/): Missing authorization in Oracle Sales (high 7.7) - [CVE-2026-83128](https://insights.sbomify.com/CVE-2026-83128/): Missing authorization in Oracle Sales Offline (high 7.5) - [CVE-2026-83127](https://insights.sbomify.com/CVE-2026-83127/): Missing authorization in Oracle Sales Offline (high 7.7) - [CVE-2026-83126](https://insights.sbomify.com/CVE-2026-83126/): Cross-site request forgery in Oracle Sales Online (high 7.6) - [CVE-2026-83125](https://insights.sbomify.com/CVE-2026-83125/): Missing authorization in Oracle Report Manager (high 8.8) - [CVE-2026-83124](https://insights.sbomify.com/CVE-2026-83124/): Missing authorization in Oracle Sales Online (high 8.8) - [CVE-2026-83123](https://insights.sbomify.com/CVE-2026-83123/): Missing authorization in Oracle Report Manager (high 7.1) - [CVE-2026-83122](https://insights.sbomify.com/CVE-2026-83122/): Missing authorization in Oracle Report Manager (high 8.8) - [CVE-2026-83121](https://insights.sbomify.com/CVE-2026-83121/): Privilege escalation in Oracle Marketing (high 8.8) - [CVE-2026-83120](https://insights.sbomify.com/CVE-2026-83120/): Privilege escalation in Oracle Alert (high 8.8) - [CVE-2026-8312](https://insights.sbomify.com/CVE-2026-8312/): Rockwell Automation Arena® - Memory Corruption Vulnerability (high 7.0) - [CVE-2026-83119](https://insights.sbomify.com/CVE-2026-83119/): Privilege escalation in Oracle User Management (high 8.8) - [CVE-2026-83118](https://insights.sbomify.com/CVE-2026-83118/): Privilege escalation in Applications DBA (high 7.8) - [CVE-2026-83117](https://insights.sbomify.com/CVE-2026-83117/): Privilege escalation in Applications DBA (high 7.2) - [CVE-2026-83116](https://insights.sbomify.com/CVE-2026-83116/): Information disclosure in Oracle Order Management (high 7.7) - [CVE-2026-83115](https://insights.sbomify.com/CVE-2026-83115/): Missing authorization in Oracle Applications Manager (high 7.5) - [CVE-2026-83114](https://insights.sbomify.com/CVE-2026-83114/): Privilege escalation in Oracle Quality (high 7.5) - [CVE-2026-83113](https://insights.sbomify.com/CVE-2026-83113/): Missing authorization in Oracle Quality (high 7.1) - [CVE-2026-83112](https://insights.sbomify.com/CVE-2026-83112/): Privilege escalation in Oracle Lease and Finance Management (high 7.2) - [CVE-2026-83111](https://insights.sbomify.com/CVE-2026-83111/): Missing authorization in Oracle Partner Management (high 7.1) - [CVE-2026-83110](https://insights.sbomify.com/CVE-2026-83110/): Missing authorization in Oracle Marketing (high 7.5) - [CVE-2026-83109](https://insights.sbomify.com/CVE-2026-83109/): Missing authorization in Oracle Forms (medium 5.3) - [CVE-2026-83108](https://insights.sbomify.com/CVE-2026-83108/): Auth bypass in Oracle Forms (critical 9.8) - [CVE-2026-83107](https://insights.sbomify.com/CVE-2026-83107/): Missing authorization in Oracle Forms (critical 9.1) - [CVE-2026-83106](https://insights.sbomify.com/CVE-2026-83106/): Missing authorization in Oracle Forms (high 7.5) - [CVE-2026-83105](https://insights.sbomify.com/CVE-2026-83105/): Missing authorization in Oracle Forms (critical 9.0) - [CVE-2026-83104](https://insights.sbomify.com/CVE-2026-83104/): Auth bypass in Oracle Forms (critical 9.1) - [CVE-2026-83103](https://insights.sbomify.com/CVE-2026-83103/): Missing authorization in Oracle Forms (critical 9.1) - [CVE-2026-83102](https://insights.sbomify.com/CVE-2026-83102/): Missing authorization in Oracle Forms (high 7.4) - [CVE-2026-83101](https://insights.sbomify.com/CVE-2026-83101/): Missing authorization in Oracle Forms (high 8.1) - [CVE-2026-83100](https://insights.sbomify.com/CVE-2026-83100/): Auth bypass in Oracle Forms (critical 9.8) - [CVE-2026-8310](https://insights.sbomify.com/CVE-2026-8310/): Reflected XSS in Webbeyaz's Mediküm Web (medium 6.1) - [CVE-2026-83099](https://insights.sbomify.com/CVE-2026-83099/): Auth bypass in Oracle Forms (critical 10.0) - [CVE-2026-83098](https://insights.sbomify.com/CVE-2026-83098/): Auth bypass in Oracle Forms (critical 9.8) - [CVE-2026-83097](https://insights.sbomify.com/CVE-2026-83097/): Missing authorization in Oracle Forms (medium 6.5) - [CVE-2026-83096](https://insights.sbomify.com/CVE-2026-83096/): Missing authorization in Oracle Forms (high 7.9) - [CVE-2026-83095](https://insights.sbomify.com/CVE-2026-83095/): Auth bypass in Oracle Forms (critical 9.8) - [CVE-2026-83094](https://insights.sbomify.com/CVE-2026-83094/): Auth bypass in Oracle Forms (critical 9.8) - [CVE-2026-83093](https://insights.sbomify.com/CVE-2026-83093/): Missing authorization in Oracle Forms (high 8.6) - [CVE-2026-83092](https://insights.sbomify.com/CVE-2026-83092/): Missing authorization in Oracle Field Service (high 7.1) - [CVE-2026-83091](https://insights.sbomify.com/CVE-2026-83091/): Missing authorization in Oracle Field Service (high 7.6) - [CVE-2026-83090](https://insights.sbomify.com/CVE-2026-83090/): Missing authorization in Oracle Spares Management (high 8.8) - [CVE-2026-8309](https://insights.sbomify.com/CVE-2026-8309/): Reflected XSS in Armiya Technologies' Access Control System (medium 5.4) - [CVE-2026-83089](https://insights.sbomify.com/CVE-2026-83089/): Missing authorization in Oracle Alert (high 8.1) - [CVE-2026-83088](https://insights.sbomify.com/CVE-2026-83088/): Denial of service in Oracle Database Server (high 7.7) - [CVE-2026-83087](https://insights.sbomify.com/CVE-2026-83087/): Missing authorization in Siebel CRM Cloud Applications (high 8.2) - [CVE-2026-83086](https://insights.sbomify.com/CVE-2026-83086/): Missing authorization in Siebel CRM Cloud Applications (high 8.8) - [CVE-2026-83085](https://insights.sbomify.com/CVE-2026-83085/): Missing authorization in Siebel CRM Cloud Applications (high 8.2) - [CVE-2026-83084](https://insights.sbomify.com/CVE-2026-83084/): Missing authorization in Oracle Marketing (high 7.7) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/327/