# Vulnerabilities published in 2026 - [CVE-2026-71052](https://insights.sbomify.com/CVE-2026-71052/): Missing authorization in Oracle Agile Engineering Data Management (high 8.8) - [CVE-2026-71051](https://insights.sbomify.com/CVE-2026-71051/): Missing authorization in Oracle Product Lifecycle Analytics (high 8.8) - [CVE-2026-71050](https://insights.sbomify.com/CVE-2026-71050/): Missing authorization in Oracle Product Lifecycle Analytics (high 8.7) - [CVE-2026-7105](https://insights.sbomify.com/CVE-2026-7105/): Missing authorization in Xpro Addons — 140+ Widgets for Elementor (medium 4.3) - [CVE-2026-71049](https://insights.sbomify.com/CVE-2026-71049/): Missing authorization in Oracle Product Lifecycle Analytics (high 8.5) - [CVE-2026-71048](https://insights.sbomify.com/CVE-2026-71048/): Missing authorization in Oracle Product Lifecycle Analytics (high 7.6) - [CVE-2026-71047](https://insights.sbomify.com/CVE-2026-71047/): Missing authorization in Oracle Identity Manager (high 8.8) - [CVE-2026-71046](https://insights.sbomify.com/CVE-2026-71046/): Missing authorization in Oracle Agile PLM (high 8.8) - [CVE-2026-71045](https://insights.sbomify.com/CVE-2026-71045/): Missing authorization in Oracle Agile PLM (high 8.8) - [CVE-2026-71044](https://insights.sbomify.com/CVE-2026-71044/): Missing authorization in Oracle Agile PLM (high 8.8) - [CVE-2026-71043](https://insights.sbomify.com/CVE-2026-71043/): Missing authorization in Oracle Agile PLM (high 7.5) - [CVE-2026-71042](https://insights.sbomify.com/CVE-2026-71042/): Missing authorization in Oracle Agile PLM (high 8.1) - [CVE-2026-71041](https://insights.sbomify.com/CVE-2026-71041/): Missing authorization in Oracle Agile PLM (high 7.0) - [CVE-2026-71040](https://insights.sbomify.com/CVE-2026-71040/): Missing authorization in Oracle Agile PLM (critical 9.8) - [CVE-2026-71039](https://insights.sbomify.com/CVE-2026-71039/): Missing authorization in Oracle Agile PLM (high 8.8) - [CVE-2026-71038](https://insights.sbomify.com/CVE-2026-71038/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5) - [CVE-2026-71037](https://insights.sbomify.com/CVE-2026-71037/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.3) - [CVE-2026-71036](https://insights.sbomify.com/CVE-2026-71036/): Privilege escalation in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-71035](https://insights.sbomify.com/CVE-2026-71035/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.1) - [CVE-2026-71034](https://insights.sbomify.com/CVE-2026-71034/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5) - [CVE-2026-71033](https://insights.sbomify.com/CVE-2026-71033/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 5.5) - [CVE-2026-71032](https://insights.sbomify.com/CVE-2026-71032/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.2) - [CVE-2026-71031](https://insights.sbomify.com/CVE-2026-71031/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.1) - [CVE-2026-71030](https://insights.sbomify.com/CVE-2026-71030/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.2) - [CVE-2026-7103](https://insights.sbomify.com/CVE-2026-7103/): code-projects Chat System MD5 Hash update_user.php weak hash (medium 6.3) - [CVE-2026-71029](https://insights.sbomify.com/CVE-2026-71029/): Missing authorization in Helidon (medium 6.8) - [CVE-2026-71028](https://insights.sbomify.com/CVE-2026-71028/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.8) - [CVE-2026-71027](https://insights.sbomify.com/CVE-2026-71027/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.6) - [CVE-2026-71026](https://insights.sbomify.com/CVE-2026-71026/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-71025](https://insights.sbomify.com/CVE-2026-71025/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.1) - [CVE-2026-71024](https://insights.sbomify.com/CVE-2026-71024/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.2) - [CVE-2026-71023](https://insights.sbomify.com/CVE-2026-71023/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5) - [CVE-2026-71022](https://insights.sbomify.com/CVE-2026-71022/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.6) - [CVE-2026-71021](https://insights.sbomify.com/CVE-2026-71021/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.6) - [CVE-2026-71020](https://insights.sbomify.com/CVE-2026-71020/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.6) - [CVE-2026-7102](https://insights.sbomify.com/CVE-2026-7102/): Tenda F456 httpd WriteFacMac FromWriteFacMac command injection (medium 5.3) - [CVE-2026-71019](https://insights.sbomify.com/CVE-2026-71019/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.1) - [CVE-2026-71018](https://insights.sbomify.com/CVE-2026-71018/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.2) - [CVE-2026-71017](https://insights.sbomify.com/CVE-2026-71017/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.5) - [CVE-2026-71016](https://insights.sbomify.com/CVE-2026-71016/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.2) - [CVE-2026-71015](https://insights.sbomify.com/CVE-2026-71015/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-71014](https://insights.sbomify.com/CVE-2026-71014/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-71013](https://insights.sbomify.com/CVE-2026-71013/): Missing authorization in Oracle Hyperion Financial Management (medium 6.0) - [CVE-2026-71012](https://insights.sbomify.com/CVE-2026-71012/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.1) - [CVE-2026-71011](https://insights.sbomify.com/CVE-2026-71011/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.1) - [CVE-2026-71010](https://insights.sbomify.com/CVE-2026-71010/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.8) - [CVE-2026-7101](https://insights.sbomify.com/CVE-2026-7101/): Tenda F456 httpd WrlclientSet fromWrlclientSet buffer overflow (high 8.7) - [CVE-2026-71009](https://insights.sbomify.com/CVE-2026-71009/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.4) - [CVE-2026-71008](https://insights.sbomify.com/CVE-2026-71008/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.8) - [CVE-2026-71007](https://insights.sbomify.com/CVE-2026-71007/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.8) - [CVE-2026-71006](https://insights.sbomify.com/CVE-2026-71006/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.1) - [CVE-2026-71005](https://insights.sbomify.com/CVE-2026-71005/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.1) - [CVE-2026-71004](https://insights.sbomify.com/CVE-2026-71004/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.1) - [CVE-2026-71003](https://insights.sbomify.com/CVE-2026-71003/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.1) - [CVE-2026-71002](https://insights.sbomify.com/CVE-2026-71002/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.5) - [CVE-2026-71001](https://insights.sbomify.com/CVE-2026-71001/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.5) - [CVE-2026-71000](https://insights.sbomify.com/CVE-2026-71000/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.7) - [CVE-2026-7100](https://insights.sbomify.com/CVE-2026-7100/): Tenda F456 httpd Natlimit fromNatlimitof buffer overflow (high 8.7) - [CVE-2026-70999](https://insights.sbomify.com/CVE-2026-70999/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.1) - [CVE-2026-70998](https://insights.sbomify.com/CVE-2026-70998/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.3) - [CVE-2026-70997](https://insights.sbomify.com/CVE-2026-70997/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-70996](https://insights.sbomify.com/CVE-2026-70996/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.6) - [CVE-2026-70995](https://insights.sbomify.com/CVE-2026-70995/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.8) - [CVE-2026-70994](https://insights.sbomify.com/CVE-2026-70994/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-70993](https://insights.sbomify.com/CVE-2026-70993/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 8.2) - [CVE-2026-70992](https://insights.sbomify.com/CVE-2026-70992/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.0) - [CVE-2026-70991](https://insights.sbomify.com/CVE-2026-70991/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.3) - [CVE-2026-70990](https://insights.sbomify.com/CVE-2026-70990/): Information disclosure in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.8) - [CVE-2026-7099](https://insights.sbomify.com/CVE-2026-7099/): Tenda F456 httpd QuickIndex formQuickIndex buffer overflow (high 8.7) - [CVE-2026-70989](https://insights.sbomify.com/CVE-2026-70989/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.5) - [CVE-2026-70988](https://insights.sbomify.com/CVE-2026-70988/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.7) - [CVE-2026-70987](https://insights.sbomify.com/CVE-2026-70987/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5) - [CVE-2026-70986](https://insights.sbomify.com/CVE-2026-70986/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5) - [CVE-2026-70985](https://insights.sbomify.com/CVE-2026-70985/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (high 7.5) - [CVE-2026-70984](https://insights.sbomify.com/CVE-2026-70984/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-70983](https://insights.sbomify.com/CVE-2026-70983/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.8) - [CVE-2026-70982](https://insights.sbomify.com/CVE-2026-70982/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (medium 6.8) - [CVE-2026-70981](https://insights.sbomify.com/CVE-2026-70981/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-70980](https://insights.sbomify.com/CVE-2026-70980/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.0) - [CVE-2026-7098](https://insights.sbomify.com/CVE-2026-7098/): Tenda F456 httpd DhcpListClient fromDhcpListClient buffer overflow (high 8.7) - [CVE-2026-70979](https://insights.sbomify.com/CVE-2026-70979/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-70978](https://insights.sbomify.com/CVE-2026-70978/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-70977](https://insights.sbomify.com/CVE-2026-70977/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-70976](https://insights.sbomify.com/CVE-2026-70976/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1) - [CVE-2026-70975](https://insights.sbomify.com/CVE-2026-70975/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.5) - [CVE-2026-70974](https://insights.sbomify.com/CVE-2026-70974/): Privilege escalation in Oracle Hyperion Financial Management (medium 5.3) - [CVE-2026-70973](https://insights.sbomify.com/CVE-2026-70973/): Auth bypass in Oracle Hyperion Infrastructure Technology (high 7.5) - [CVE-2026-70972](https://insights.sbomify.com/CVE-2026-70972/): Missing authorization in Oracle Hyperion Infrastructure Technology (medium 6.8) - [CVE-2026-70971](https://insights.sbomify.com/CVE-2026-70971/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 7.1) - [CVE-2026-70970](https://insights.sbomify.com/CVE-2026-70970/): Missing authorization in Oracle WebCenter Portal (critical 9.8) - [CVE-2026-7097](https://insights.sbomify.com/CVE-2026-7097/): Tenda F456 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow (high 8.7) - [CVE-2026-70969](https://insights.sbomify.com/CVE-2026-70969/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.5) - [CVE-2026-70968](https://insights.sbomify.com/CVE-2026-70968/): Missing authorization in Oracle Hyperion Infrastructure Technology (medium 6.5) - [CVE-2026-70967](https://insights.sbomify.com/CVE-2026-70967/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 7.1) - [CVE-2026-70966](https://insights.sbomify.com/CVE-2026-70966/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 8.8) - [CVE-2026-70965](https://insights.sbomify.com/CVE-2026-70965/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 8.8) - [CVE-2026-70964](https://insights.sbomify.com/CVE-2026-70964/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 8.2) - [CVE-2026-70963](https://insights.sbomify.com/CVE-2026-70963/): Missing authorization in Oracle Hyperion Infrastructure Technology (medium 4.2) - [CVE-2026-70962](https://insights.sbomify.com/CVE-2026-70962/): Missing authorization in Oracle Hyperion Infrastructure Technology (low 3.3) - [CVE-2026-70961](https://insights.sbomify.com/CVE-2026-70961/): Missing authorization in Oracle Hyperion Infrastructure Technology (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/422/