# Vulnerabilities published in 2026


- [CVE-2026-71145](https://insights.sbomify.com/CVE-2026-71145/): Missing authorization in Oracle Hyperion Financial Management (medium 4.4)
- [CVE-2026-71144](https://insights.sbomify.com/CVE-2026-71144/): Missing authorization in Oracle Hyperion Financial Management (low 3.0)
- [CVE-2026-71143](https://insights.sbomify.com/CVE-2026-71143/): Missing authorization in Oracle Communications Unified Inventory Management (high 7.4)
- [CVE-2026-71142](https://insights.sbomify.com/CVE-2026-71142/): Missing authorization in Oracle Communications Unified Inventory Management (high 7.5)
- [CVE-2026-71141](https://insights.sbomify.com/CVE-2026-71141/): Other in Oracle VM VirtualBox (high 7.7)
- [CVE-2026-71140](https://insights.sbomify.com/CVE-2026-71140/): Other in Oracle VM VirtualBox (low 3.4)
- [CVE-2026-7114](https://insights.sbomify.com/CVE-2026-7114/): code-projects Employee Management System edit.php sql injection (medium 5.3)
- [CVE-2026-71139](https://insights.sbomify.com/CVE-2026-71139/): Denial of service in Oracle VM VirtualBox (medium 4.4)
- [CVE-2026-71138](https://insights.sbomify.com/CVE-2026-71138/): Other in Oracle VM VirtualBox (high 7.3)
- [CVE-2026-71137](https://insights.sbomify.com/CVE-2026-71137/): Denial of service in Oracle VM VirtualBox (medium 6.0)
- [CVE-2026-71136](https://insights.sbomify.com/CVE-2026-71136/): Other in Oracle VM VirtualBox (high 7.3)
- [CVE-2026-71135](https://insights.sbomify.com/CVE-2026-71135/): Denial of service in Oracle VM VirtualBox (medium 6.0)
- [CVE-2026-71134](https://insights.sbomify.com/CVE-2026-71134/): Other in Oracle VM VirtualBox (medium 5.7)
- [CVE-2026-71133](https://insights.sbomify.com/CVE-2026-71133/): Auth bypass in Oracle Access Manager (critical 10.0)
- [CVE-2026-71132](https://insights.sbomify.com/CVE-2026-71132/): Missing authorization in Oracle VM VirtualBox (medium 5.3)
- [CVE-2026-71131](https://insights.sbomify.com/CVE-2026-71131/): Other in Oracle VM VirtualBox (high 8.6)
- [CVE-2026-71130](https://insights.sbomify.com/CVE-2026-71130/): Missing authorization in Oracle VM VirtualBox (high 8.2)
- [CVE-2026-7113](https://insights.sbomify.com/CVE-2026-7113/): NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication (medium 6.3)
- [CVE-2026-71129](https://insights.sbomify.com/CVE-2026-71129/): Other in Oracle VM VirtualBox (high 8.2)
- [CVE-2026-71128](https://insights.sbomify.com/CVE-2026-71128/): Denial of service in Oracle VM VirtualBox (medium 6.0)
- [CVE-2026-71127](https://insights.sbomify.com/CVE-2026-71127/): Denial of service in Oracle VM VirtualBox (medium 6.0)
- [CVE-2026-71126](https://insights.sbomify.com/CVE-2026-71126/): Other in Oracle VM VirtualBox (high 7.8)
- [CVE-2026-71125](https://insights.sbomify.com/CVE-2026-71125/): Race condition in Oracle VM VirtualBox (medium 6.1)
- [CVE-2026-71124](https://insights.sbomify.com/CVE-2026-71124/): Denial of service in Oracle Access Manager (medium 4.3)
- [CVE-2026-71123](https://insights.sbomify.com/CVE-2026-71123/): Privilege escalation in Oracle Hyperion Financial Management (medium 5.4)
- [CVE-2026-71122](https://insights.sbomify.com/CVE-2026-71122/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 8.0)
- [CVE-2026-71121](https://insights.sbomify.com/CVE-2026-71121/): Missing authorization in Oracle Hyperion Financial Management (medium 6.5)
- [CVE-2026-71120](https://insights.sbomify.com/CVE-2026-71120/): Denial of service in Oracle Hyperion Financial Management (medium 5.3)
- [CVE-2026-7112](https://insights.sbomify.com/CVE-2026-7112/): NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication (medium 6.3)
- [CVE-2026-71119](https://insights.sbomify.com/CVE-2026-71119/): Missing authorization in Oracle Hyperion Financial Management (medium 6.4)
- [CVE-2026-71118](https://insights.sbomify.com/CVE-2026-71118/): Missing authorization in Oracle Hyperion Financial Management (medium 4.8)
- [CVE-2026-71117](https://insights.sbomify.com/CVE-2026-71117/): Other in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-71116](https://insights.sbomify.com/CVE-2026-71116/): Other in Oracle VM VirtualBox (high 7.5)
- [CVE-2026-71115](https://insights.sbomify.com/CVE-2026-71115/): Missing authorization in Oracle VM VirtualBox (medium 6.0)
- [CVE-2026-71114](https://insights.sbomify.com/CVE-2026-71114/): Missing authorization in Oracle VM VirtualBox (medium 6.0)
- [CVE-2026-71113](https://insights.sbomify.com/CVE-2026-71113/): Denial of service in Oracle VM VirtualBox (high 7.5)
- [CVE-2026-71112](https://insights.sbomify.com/CVE-2026-71112/): Missing authorization in PeopleSoft Enterprise FIN Common Objects (high 8.1)
- [CVE-2026-71111](https://insights.sbomify.com/CVE-2026-71111/): Missing authorization in Oracle Identity Manager (high 7.8)
- [CVE-2026-71110](https://insights.sbomify.com/CVE-2026-71110/): Privilege escalation in Helidon (high 8.1)
- [CVE-2026-7111](https://insights.sbomify.com/CVE-2026-7111/): Use after free in Text::CSV XS (high 8.4)
- [CVE-2026-71109](https://insights.sbomify.com/CVE-2026-71109/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.7)
- [CVE-2026-71108](https://insights.sbomify.com/CVE-2026-71108/): Privilege escalation in Oracle Hyperion Financial Management (medium 5.3)
- [CVE-2026-71107](https://insights.sbomify.com/CVE-2026-71107/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.5)
- [CVE-2026-71106](https://insights.sbomify.com/CVE-2026-71106/): Missing authorization in Oracle Hospitality OPERA 5 Property Services (high 8.8)
- [CVE-2026-71105](https://insights.sbomify.com/CVE-2026-71105/): Denial of service in Oracle Hyperion Financial Management (medium 4.7)
- [CVE-2026-71104](https://insights.sbomify.com/CVE-2026-71104/): Missing authorization in Oracle HRMS (Netherlands) (high 7.2)
- [CVE-2026-71103](https://insights.sbomify.com/CVE-2026-71103/): Missing authorization in Oracle Hyperion Financial Management (medium 6.3)
- [CVE-2026-71102](https://insights.sbomify.com/CVE-2026-71102/): Missing authorization in Oracle Database Server (critical 9.1)
- [CVE-2026-71101](https://insights.sbomify.com/CVE-2026-71101/): Missing authorization in Oracle HRMS (US) (high 7.8)
- [CVE-2026-71100](https://insights.sbomify.com/CVE-2026-71100/): Missing authorization in Oracle Database Server (medium 5.3)
- [CVE-2026-7110](https://insights.sbomify.com/CVE-2026-7110/): code-projects Invoice System in Laravel item cross site scripting (medium 5.1)
- [CVE-2026-71099](https://insights.sbomify.com/CVE-2026-71099/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.2)
- [CVE-2026-71098](https://insights.sbomify.com/CVE-2026-71098/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.0)
- [CVE-2026-71097](https://insights.sbomify.com/CVE-2026-71097/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.8)
- [CVE-2026-71096](https://insights.sbomify.com/CVE-2026-71096/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 8.2)
- [CVE-2026-71095](https://insights.sbomify.com/CVE-2026-71095/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 8.3)
- [CVE-2026-71094](https://insights.sbomify.com/CVE-2026-71094/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.3)
- [CVE-2026-71092](https://insights.sbomify.com/CVE-2026-71092/): Missing authorization in PeopleSoft Enterprise FIN Lease Administration (high 7.5)
- [CVE-2026-71091](https://insights.sbomify.com/CVE-2026-71091/): Missing authorization in Oracle Hyperion Financial Management (medium 6.5)
- [CVE-2026-71090](https://insights.sbomify.com/CVE-2026-71090/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.4)
- [CVE-2026-7109](https://insights.sbomify.com/CVE-2026-7109/): code-projects Invoice System in Laravel API Endpoint item improper authorization (medium 6.9)
- [CVE-2026-71089](https://insights.sbomify.com/CVE-2026-71089/): Missing authorization in Oracle Agile PLM MCAD Connector (low 3.3)
- [CVE-2026-71088](https://insights.sbomify.com/CVE-2026-71088/): Missing authorization in Oracle Agile PLM MCAD Connector (medium 4.8)
- [CVE-2026-71087](https://insights.sbomify.com/CVE-2026-71087/): Information disclosure in Oracle Agile PLM MCAD Connector (medium 5.3)
- [CVE-2026-71085](https://insights.sbomify.com/CVE-2026-71085/): Privilege escalation in Oracle Hyperion Financial Management (medium 4.9)
- [CVE-2026-71084](https://insights.sbomify.com/CVE-2026-71084/): Other in MySQL Connectors (medium 6.8)
- [CVE-2026-71083](https://insights.sbomify.com/CVE-2026-71083/): Missing authorization in Oracle Agile PLM MCAD Connector (low 1.8)
- [CVE-2026-71082](https://insights.sbomify.com/CVE-2026-71082/): Missing authorization in Oracle Agile PLM MCAD Connector (low 2.5)
- [CVE-2026-71081](https://insights.sbomify.com/CVE-2026-71081/): Missing authorization in Oracle Agile PLM MCAD Connector (low 1.9)
- [CVE-2026-71080](https://insights.sbomify.com/CVE-2026-71080/): Missing authorization in Oracle Agile PLM MCAD Connector (low 3.7)
- [CVE-2026-7108](https://insights.sbomify.com/CVE-2026-7108/): code-projects Invoice System in Laravel cross-site request forgery (medium 5.3)
- [CVE-2026-71079](https://insights.sbomify.com/CVE-2026-71079/): Denial of service in MySQL Connectors (medium 6.5)
- [CVE-2026-71078](https://insights.sbomify.com/CVE-2026-71078/): Other in Oracle Agile PLM MCAD Connector (medium 4.2)
- [CVE-2026-71077](https://insights.sbomify.com/CVE-2026-71077/): Missing authorization in Oracle Agile PLM MCAD Connector (medium 5.3)
- [CVE-2026-71076](https://insights.sbomify.com/CVE-2026-71076/): Missing authorization in Oracle Agile PLM MCAD Connector (medium 5.3)
- [CVE-2026-71075](https://insights.sbomify.com/CVE-2026-71075/): Missing authorization in Oracle Agile PLM MCAD Connector (medium 5.9)
- [CVE-2026-71074](https://insights.sbomify.com/CVE-2026-71074/): Missing authorization in Helidon (critical 9.8)
- [CVE-2026-71073](https://insights.sbomify.com/CVE-2026-71073/): Denial of service in MySQL Connectors (medium 5.5)
- [CVE-2026-71072](https://insights.sbomify.com/CVE-2026-71072/): Other in Oracle Agile PLM MCAD Connector (low 3.3)
- [CVE-2026-71071](https://insights.sbomify.com/CVE-2026-71071/): Missing authorization in Oracle Agile PLM MCAD Connector (medium 4.6)
- [CVE-2026-71070](https://insights.sbomify.com/CVE-2026-71070/): Missing authorization in Oracle Agile PLM MCAD Connector (medium 6.5)
- [CVE-2026-7107](https://insights.sbomify.com/CVE-2026-7107/): code-projects Invoice System in Laravel company unrestricted upload (medium 5.3)
- [CVE-2026-71069](https://insights.sbomify.com/CVE-2026-71069/): Missing authorization in Oracle Agile PLM MCAD Connector (high 7.5)
- [CVE-2026-71068](https://insights.sbomify.com/CVE-2026-71068/): Auth bypass in Oracle Agile PLM MCAD Connector (high 8.1)
- [CVE-2026-71067](https://insights.sbomify.com/CVE-2026-71067/): Missing authorization in Oracle Agile PLM MCAD Connector (high 8.8)
- [CVE-2026-71066](https://insights.sbomify.com/CVE-2026-71066/): Other in Oracle Agile PLM MCAD Connector (medium 4.5)
- [CVE-2026-71065](https://insights.sbomify.com/CVE-2026-71065/): Missing authorization in Helidon (critical 9.3)
- [CVE-2026-71064](https://insights.sbomify.com/CVE-2026-71064/): Missing authorization in Oracle Database Server (critical 9.6)
- [CVE-2026-71063](https://insights.sbomify.com/CVE-2026-71063/): Missing authorization in Oracle Database Server (critical 9.6)
- [CVE-2026-71062](https://insights.sbomify.com/CVE-2026-71062/): Missing authorization in Oracle Database Server (high 8.5)
- [CVE-2026-71061](https://insights.sbomify.com/CVE-2026-71061/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.5)
- [CVE-2026-71060](https://insights.sbomify.com/CVE-2026-71060/): Missing authorization in Oracle Hyperion Financial Management (medium 4.4)
- [CVE-2026-7106](https://insights.sbomify.com/CVE-2026-7106/): Highland Software Custom Role Manager <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation (high 8.8)
- [CVE-2026-71059](https://insights.sbomify.com/CVE-2026-71059/): Missing authorization in Oracle BI Publisher (critical 9.9)
- [CVE-2026-71058](https://insights.sbomify.com/CVE-2026-71058/): Missing authorization in Oracle BI Publisher (high 8.8)
- [CVE-2026-71057](https://insights.sbomify.com/CVE-2026-71057/): Missing authorization in Oracle BI Publisher (high 8.5)
- [CVE-2026-71056](https://insights.sbomify.com/CVE-2026-71056/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 7.7)
- [CVE-2026-71055](https://insights.sbomify.com/CVE-2026-71055/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 8.8)
- [CVE-2026-71054](https://insights.sbomify.com/CVE-2026-71054/): Denial of service in Oracle Java SE (medium 6.5)
- [CVE-2026-71053](https://insights.sbomify.com/CVE-2026-71053/): Missing authorization in Oracle Agile Engineering Data Management (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/421/