# Vulnerabilities published in 2026 - [CVE-2026-83083](https://insights.sbomify.com/CVE-2026-83083/): Missing authorization in Oracle Marketing (high 8.5) - [CVE-2026-83082](https://insights.sbomify.com/CVE-2026-83082/): Missing authorization in Oracle Marketing (high 7.2) - [CVE-2026-83081](https://insights.sbomify.com/CVE-2026-83081/): Missing authorization in Oracle Banking Corporate Lending (high 8.0) - [CVE-2026-83080](https://insights.sbomify.com/CVE-2026-83080/): Missing authorization in Oracle Banking Branch (high 7.1) - [CVE-2026-8308](https://insights.sbomify.com/CVE-2026-8308/): Reflected XSS Polen Media's Website Template (medium 6.1) - [CVE-2026-83079](https://insights.sbomify.com/CVE-2026-83079/): Missing authorization in Siebel CRM Cloud Applications (high 7.9) - [CVE-2026-83078](https://insights.sbomify.com/CVE-2026-83078/): Missing authorization in Siebel CRM Cloud Applications (high 8.2) - [CVE-2026-83077](https://insights.sbomify.com/CVE-2026-83077/): Missing authorization in Siebel CRM Cloud Applications (medium 6.4) - [CVE-2026-83076](https://insights.sbomify.com/CVE-2026-83076/): Missing authorization in Oracle HR Intelligence (medium 6.8) - [CVE-2026-83075](https://insights.sbomify.com/CVE-2026-83075/): Missing authorization in Siebel CRM Cloud Applications (high 7.5) - [CVE-2026-83074](https://insights.sbomify.com/CVE-2026-83074/): Missing authorization in Siebel CRM Cloud Applications (high 8.6) - [CVE-2026-83073](https://insights.sbomify.com/CVE-2026-83073/): Missing authorization in Siebel CRM Cloud Applications (high 8.1) - [CVE-2026-83072](https://insights.sbomify.com/CVE-2026-83072/): Missing authorization in Oracle Applications Framework (high 8.1) - [CVE-2026-83071](https://insights.sbomify.com/CVE-2026-83071/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.8) - [CVE-2026-83070](https://insights.sbomify.com/CVE-2026-83070/): Missing authorization in PeopleSoft Enterprise PRTL Interaction Hub (high 7.7) - [CVE-2026-8307](https://insights.sbomify.com/CVE-2026-8307/): SQLi in Webbeyaz's Mediküm Web (critical 9.8) - [CVE-2026-83069](https://insights.sbomify.com/CVE-2026-83069/): Missing authorization in Oracle Fusion Middleware Control (high 8.8) - [CVE-2026-83068](https://insights.sbomify.com/CVE-2026-83068/): Missing authorization in Oracle Enterprise Manager for Oracle Database (high 7.7) - [CVE-2026-83067](https://insights.sbomify.com/CVE-2026-83067/): Missing authorization in Oracle JDeveloper (high 8.1) - [CVE-2026-83066](https://insights.sbomify.com/CVE-2026-83066/): Auth bypass in Oracle Internet Directory (critical 9.8) - [CVE-2026-83065](https://insights.sbomify.com/CVE-2026-83065/): Missing authorization in Oracle WebCenter Portal (high 7.5) - [CVE-2026-83064](https://insights.sbomify.com/CVE-2026-83064/): Missing authorization in Oracle WebCenter Portal (critical 9.1) - [CVE-2026-83063](https://insights.sbomify.com/CVE-2026-83063/): Missing authorization in Oracle Internet Directory (high 7.2) - [CVE-2026-83062](https://insights.sbomify.com/CVE-2026-83062/): Auth bypass in Oracle Internet Directory (critical 9.8) - [CVE-2026-83061](https://insights.sbomify.com/CVE-2026-83061/): Auth bypass in Oracle Internet Directory (critical 9.8) - [CVE-2026-83060](https://insights.sbomify.com/CVE-2026-83060/): Auth bypass in Oracle Internet Directory (critical 9.8) - [CVE-2026-8306](https://insights.sbomify.com/CVE-2026-8306/): Stored XSS in Armiya Technologies' Access Control System (medium 6.1) - [CVE-2026-83059](https://insights.sbomify.com/CVE-2026-83059/): Auth bypass in Oracle Internet Directory (critical 10.0) - [CVE-2026-83058](https://insights.sbomify.com/CVE-2026-83058/): Missing authorization in Oracle Internet Directory (critical 9.9) - [CVE-2026-83057](https://insights.sbomify.com/CVE-2026-83057/): Missing authorization in Oracle Internet Directory (critical 9.9) - [CVE-2026-83056](https://insights.sbomify.com/CVE-2026-83056/): Missing authorization in Oracle Internet Directory (critical 9.9) - [CVE-2026-83055](https://insights.sbomify.com/CVE-2026-83055/): Missing authorization in Oracle Internet Directory (critical 9.9) - [CVE-2026-83054](https://insights.sbomify.com/CVE-2026-83054/): Auth bypass in Oracle Internet Directory (critical 9.8) - [CVE-2026-83053](https://insights.sbomify.com/CVE-2026-83053/): Missing authorization in Oracle WebCenter Portal (high 8.8) - [CVE-2026-83052](https://insights.sbomify.com/CVE-2026-83052/): Missing authorization in Oracle WebCenter Portal (high 7.6) - [CVE-2026-83051](https://insights.sbomify.com/CVE-2026-83051/): Missing authorization in Oracle WebCenter Portal (high 7.5) - [CVE-2026-83050](https://insights.sbomify.com/CVE-2026-83050/): Missing authorization in Oracle WebCenter Portal (high 7.1) - [CVE-2026-8305](https://insights.sbomify.com/CVE-2026-8305/): OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication (medium 6.9) - [CVE-2026-83049](https://insights.sbomify.com/CVE-2026-83049/): Missing authorization in Oracle WebCenter Portal (high 8.5) - [CVE-2026-83048](https://insights.sbomify.com/CVE-2026-83048/): Missing authorization in Oracle WebCenter Portal (high 7.7) - [CVE-2026-83047](https://insights.sbomify.com/CVE-2026-83047/): Missing authorization in Oracle WebCenter Portal (high 8.2) - [CVE-2026-83046](https://insights.sbomify.com/CVE-2026-83046/): Missing authorization in Oracle WebCenter Portal (high 7.1) - [CVE-2026-83045](https://insights.sbomify.com/CVE-2026-83045/): Missing authorization in Oracle WebCenter Portal (high 8.5) - [CVE-2026-83044](https://insights.sbomify.com/CVE-2026-83044/): Missing authorization in Oracle XML Gateway (high 7.1) - [CVE-2026-83043](https://insights.sbomify.com/CVE-2026-83043/): Missing authorization in Oracle WebCenter Portal (critical 9.6) - [CVE-2026-83042](https://insights.sbomify.com/CVE-2026-83042/): Auth bypass in Oracle Identity Manager (critical 9.8) - [CVE-2026-83041](https://insights.sbomify.com/CVE-2026-83041/): Missing authorization in Oracle WebCenter Portal (high 7.7) - [CVE-2026-83040](https://insights.sbomify.com/CVE-2026-83040/): Missing authorization in Oracle WebCenter Portal (critical 9.6) - [CVE-2026-8304](https://insights.sbomify.com/CVE-2026-8304/): Information Disclosure in TUBITAK BILGEM's Pardus About (medium 5.5) - [CVE-2026-83039](https://insights.sbomify.com/CVE-2026-83039/): Missing authorization in Oracle WebCenter Portal (critical 9.9) - [CVE-2026-83038](https://insights.sbomify.com/CVE-2026-83038/): Missing authorization in Oracle WebLogic Server (critical 9.9) - [CVE-2026-83037](https://insights.sbomify.com/CVE-2026-83037/): Auth bypass in Oracle WebCenter Sites (critical 9.8) - [CVE-2026-83036](https://insights.sbomify.com/CVE-2026-83036/): Auth bypass in Oracle WebCenter Sites (critical 9.8) - [CVE-2026-83035](https://insights.sbomify.com/CVE-2026-83035/): Auth bypass in Oracle WebCenter Sites (critical 9.8) - [CVE-2026-83034](https://insights.sbomify.com/CVE-2026-83034/): Missing authorization in Oracle WebCenter Sites (high 7.5) - [CVE-2026-83033](https://insights.sbomify.com/CVE-2026-83033/): Missing authorization in Oracle WebCenter Sites (high 8.8) - [CVE-2026-83032](https://insights.sbomify.com/CVE-2026-83032/): Missing authorization in Oracle WebCenter Sites (high 8.8) - [CVE-2026-83031](https://insights.sbomify.com/CVE-2026-83031/): Missing authorization in Oracle WebCenter Sites (critical 9.9) - [CVE-2026-83030](https://insights.sbomify.com/CVE-2026-83030/): Missing authorization in Oracle Managed File Transfer (high 8.3) - [CVE-2026-8303](https://insights.sbomify.com/CVE-2026-8303/): Privilege Escalation in TUBITAK BILGEM's Pardus-software (high 7.8) - [CVE-2026-83029](https://insights.sbomify.com/CVE-2026-83029/): Missing authorization in Oracle Managed File Transfer (critical 9.6) - [CVE-2026-83028](https://insights.sbomify.com/CVE-2026-83028/): Missing authorization in Oracle Identity Manager Connector (high 7.5) - [CVE-2026-83027](https://insights.sbomify.com/CVE-2026-83027/): Missing authorization in Oracle Identity Manager Connector (critical 9.3) - [CVE-2026-83026](https://insights.sbomify.com/CVE-2026-83026/): Missing authorization in Oracle Identity Manager Connector (high 8.3) - [CVE-2026-83025](https://insights.sbomify.com/CVE-2026-83025/): Missing authorization in Oracle Identity Manager Connector (high 8.7) - [CVE-2026-83024](https://insights.sbomify.com/CVE-2026-83024/): Missing authorization in Oracle Identity Manager Connector (high 7.8) - [CVE-2026-83023](https://insights.sbomify.com/CVE-2026-83023/): Missing authorization in Oracle Identity Manager Connector (high 8.6) - [CVE-2026-83022](https://insights.sbomify.com/CVE-2026-83022/): Missing authorization in Oracle WebCenter Enterprise Capture (high 7.9) - [CVE-2026-83021](https://insights.sbomify.com/CVE-2026-83021/): Auth bypass in Oracle WebLogic Server (critical 10.0) - [CVE-2026-83020](https://insights.sbomify.com/CVE-2026-83020/): Auth bypass in Oracle Platform Security for Java (critical 10.0) - [CVE-2026-83019](https://insights.sbomify.com/CVE-2026-83019/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 8.1) - [CVE-2026-83018](https://insights.sbomify.com/CVE-2026-83018/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 7.8) - [CVE-2026-83017](https://insights.sbomify.com/CVE-2026-83017/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 8.8) - [CVE-2026-83016](https://insights.sbomify.com/CVE-2026-83016/): Other in PeopleSoft Enterprise PeopleTools (high 7.2) - [CVE-2026-83015](https://insights.sbomify.com/CVE-2026-83015/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 7.0) - [CVE-2026-83014](https://insights.sbomify.com/CVE-2026-83014/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 8.1) - [CVE-2026-83013](https://insights.sbomify.com/CVE-2026-83013/): Missing authorization in Oracle WebCenter Enterprise Capture (high 8.8) - [CVE-2026-83012](https://insights.sbomify.com/CVE-2026-83012/): Missing authorization in Oracle WebCenter Enterprise Capture (high 7.7) - [CVE-2026-83011](https://insights.sbomify.com/CVE-2026-83011/): Other in Oracle Platform Security for Java (high 8.1) - [CVE-2026-83010](https://insights.sbomify.com/CVE-2026-83010/): Missing authorization in Oracle WebCenter Enterprise Capture (high 8.1) - [CVE-2026-8301](https://insights.sbomify.com/CVE-2026-8301/): OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair (high 7.8) - [CVE-2026-83009](https://insights.sbomify.com/CVE-2026-83009/): Missing authorization in Oracle WebCenter Enterprise Capture (high 8.8) - [CVE-2026-83008](https://insights.sbomify.com/CVE-2026-83008/): Missing authorization in Oracle WebCenter Enterprise Capture (high 8.8) - [CVE-2026-83007](https://insights.sbomify.com/CVE-2026-83007/): Missing authorization in Oracle WebCenter Enterprise Capture (high 8.5) - [CVE-2026-83006](https://insights.sbomify.com/CVE-2026-83006/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.1) - [CVE-2026-83005](https://insights.sbomify.com/CVE-2026-83005/): Missing authorization in Oracle WebCenter Enterprise Capture (high 8.8) - [CVE-2026-83004](https://insights.sbomify.com/CVE-2026-83004/): Missing authorization in Oracle WebCenter Enterprise Capture (high 7.2) - [CVE-2026-83003](https://insights.sbomify.com/CVE-2026-83003/): Missing authorization in Oracle WebCenter Enterprise Capture (high 8.5) - [CVE-2026-83002](https://insights.sbomify.com/CVE-2026-83002/): Missing authorization in Oracle Access Manager (high 8.5) - [CVE-2026-83001](https://insights.sbomify.com/CVE-2026-83001/): Missing authorization in Oracle Access Manager (critical 9.1) - [CVE-2026-83000](https://insights.sbomify.com/CVE-2026-83000/): Auth bypass in Service Delivery Platform (critical 9.8) - [CVE-2026-82999](https://insights.sbomify.com/CVE-2026-82999/): Missing authorization in Service Delivery Platform (critical 9.9) - [CVE-2026-82998](https://insights.sbomify.com/CVE-2026-82998/): Missing authorization in Service Delivery Platform (critical 9.9) - [CVE-2026-82997](https://insights.sbomify.com/CVE-2026-82997/): Missing authorization in Service Delivery Platform (critical 9.9) - [CVE-2026-82996](https://insights.sbomify.com/CVE-2026-82996/): Other in Oracle Platform Security for Java (high 7.8) - [CVE-2026-82995](https://insights.sbomify.com/CVE-2026-82995/): Auth bypass in Oracle Platform Security for Java (critical 9.8) - [CVE-2026-82994](https://insights.sbomify.com/CVE-2026-82994/): Auth bypass in Oracle Platform Security for Java (critical 9.8) - [CVE-2026-82993](https://insights.sbomify.com/CVE-2026-82993/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 8.5) - [CVE-2026-82992](https://insights.sbomify.com/CVE-2026-82992/): Missing authorization in Siebel CRM Deployment (high 7.8) - [CVE-2026-82989](https://insights.sbomify.com/CVE-2026-82989/): CVE-2026-82989 (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/328/