# Vulnerabilities published in 2026


- [CVE-2026-70960](https://insights.sbomify.com/CVE-2026-70960/): Privilege escalation in Oracle Hyperion Financial Management (high 7.6)
- [CVE-2026-7096](https://insights.sbomify.com/CVE-2026-7096/): Tenda HG3 formgponConf os command injection (high 8.7)
- [CVE-2026-70959](https://insights.sbomify.com/CVE-2026-70959/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 8.1)
- [CVE-2026-70958](https://insights.sbomify.com/CVE-2026-70958/): Open redirect in Oracle Hyperion Infrastructure Technology (critical 9.6)
- [CVE-2026-70957](https://insights.sbomify.com/CVE-2026-70957/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 8.1)
- [CVE-2026-70956](https://insights.sbomify.com/CVE-2026-70956/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 8.8)
- [CVE-2026-70955](https://insights.sbomify.com/CVE-2026-70955/): Missing authorization in Oracle Commerce Platform (high 7.5)
- [CVE-2026-70954](https://insights.sbomify.com/CVE-2026-70954/): Auth bypass in Oracle Commerce Platform (critical 9.8)
- [CVE-2026-70953](https://insights.sbomify.com/CVE-2026-70953/): Auth bypass in Oracle Commerce Platform (critical 9.8)
- [CVE-2026-70952](https://insights.sbomify.com/CVE-2026-70952/): Missing authorization in Oracle Hyperion Financial Management (high 8.2)
- [CVE-2026-70951](https://insights.sbomify.com/CVE-2026-70951/): Missing authorization in Siebel CRM End User (high 8.8)
- [CVE-2026-70950](https://insights.sbomify.com/CVE-2026-70950/): Privilege escalation in Oracle Hyperion Financial Management (high 7.2)
- [CVE-2026-7095](https://insights.sbomify.com/CVE-2026-7095/): code-projects Employee Management System edit.php cross site scripting (medium 5.3)
- [CVE-2026-70949](https://insights.sbomify.com/CVE-2026-70949/): Missing authorization in Siebel CRM Deployment (high 8.8)
- [CVE-2026-70948](https://insights.sbomify.com/CVE-2026-70948/): Missing authorization in Oracle Purchasing (high 8.8)
- [CVE-2026-70947](https://insights.sbomify.com/CVE-2026-70947/): Missing authorization in Oracle Purchasing (high 7.5)
- [CVE-2026-70946](https://insights.sbomify.com/CVE-2026-70946/): Privilege escalation in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-70945](https://insights.sbomify.com/CVE-2026-70945/): Missing authorization in Oracle Payroll (high 7.7)
- [CVE-2026-70944](https://insights.sbomify.com/CVE-2026-70944/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-70943](https://insights.sbomify.com/CVE-2026-70943/): Privilege escalation in Oracle Hyperion Financial Management (high 8.1)
- [CVE-2026-70942](https://insights.sbomify.com/CVE-2026-70942/): Privilege escalation in Oracle Hyperion Financial Management (high 7.7)
- [CVE-2026-70941](https://insights.sbomify.com/CVE-2026-70941/): Missing authorization in Oracle Payroll (high 8.8)
- [CVE-2026-70940](https://insights.sbomify.com/CVE-2026-70940/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-7094](https://insights.sbomify.com/CVE-2026-7094/): ShadowCloneLabs GlutamateMCPServers puppeteer_navigate index.ts server-side request forgery (medium 6.9)
- [CVE-2026-70939](https://insights.sbomify.com/CVE-2026-70939/): Privilege escalation in Oracle Hyperion Financial Management (high 7.2)
- [CVE-2026-70938](https://insights.sbomify.com/CVE-2026-70938/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.5)
- [CVE-2026-70937](https://insights.sbomify.com/CVE-2026-70937/): Privilege escalation in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-70936](https://insights.sbomify.com/CVE-2026-70936/): Privilege escalation in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-70935](https://insights.sbomify.com/CVE-2026-70935/): Missing authorization in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-70934](https://insights.sbomify.com/CVE-2026-70934/): Missing authorization in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-70933](https://insights.sbomify.com/CVE-2026-70933/): Missing authorization in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-70932](https://insights.sbomify.com/CVE-2026-70932/): Missing authorization in Oracle Order Management (high 7.2)
- [CVE-2026-70931](https://insights.sbomify.com/CVE-2026-70931/): Missing authorization in Oracle Workflow (high 8.1)
- [CVE-2026-70930](https://insights.sbomify.com/CVE-2026-70930/): Missing authorization in Oracle Order Management (high 7.5)
- [CVE-2026-7093](https://insights.sbomify.com/CVE-2026-7093/): code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization (medium 5.3)
- [CVE-2026-70929](https://insights.sbomify.com/CVE-2026-70929/): Missing authorization in Oracle Hyperion Financial Management (high 8.1)
- [CVE-2026-70928](https://insights.sbomify.com/CVE-2026-70928/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-70927](https://insights.sbomify.com/CVE-2026-70927/): Denial of service in Oracle Workflow (high 7.5)
- [CVE-2026-70926](https://insights.sbomify.com/CVE-2026-70926/): Missing authorization in Oracle Workflow (critical 9.8)
- [CVE-2026-70925](https://insights.sbomify.com/CVE-2026-70925/): Missing authorization in Oracle Hyperion Financial Management (high 8.1)
- [CVE-2026-70924](https://insights.sbomify.com/CVE-2026-70924/): Auth bypass in Oracle Web Services Manager (high 8.1)
- [CVE-2026-70923](https://insights.sbomify.com/CVE-2026-70923/): Missing authorization in Helidon (medium 6.1)
- [CVE-2026-70922](https://insights.sbomify.com/CVE-2026-70922/): Auth bypass in Oracle Financial Services Enterprise Case Management (high 8.8)
- [CVE-2026-70921](https://insights.sbomify.com/CVE-2026-70921/): Missing authorization in Oracle Hyperion Financial Management (critical 10.0)
- [CVE-2026-70920](https://insights.sbomify.com/CVE-2026-70920/): Missing authorization in Oracle Hyperion Financial Management (critical 9.9)
- [CVE-2026-7092](https://insights.sbomify.com/CVE-2026-7092/): code-projects Invoice System in Laravel Profile profile improper authorization (medium 5.3)
- [CVE-2026-70919](https://insights.sbomify.com/CVE-2026-70919/): Missing authorization in Oracle Hyperion Financial Management (low 2.5)
- [CVE-2026-70918](https://insights.sbomify.com/CVE-2026-70918/): Missing authorization in Oracle Product Hub (high 8.8)
- [CVE-2026-70917](https://insights.sbomify.com/CVE-2026-70917/): Information disclosure in Oracle Hyperion Financial Management (medium 4.0)
- [CVE-2026-70916](https://insights.sbomify.com/CVE-2026-70916/): Information disclosure in Oracle Hyperion Financial Management (medium 4.0)
- [CVE-2026-70915](https://insights.sbomify.com/CVE-2026-70915/): Missing authorization in Oracle Identity Manager (high 8.8)
- [CVE-2026-70914](https://insights.sbomify.com/CVE-2026-70914/): Other in Oracle Hyperion Financial Management (high 7.0)
- [CVE-2026-70913](https://insights.sbomify.com/CVE-2026-70913/): Auth bypass in Oracle Identity Manager (critical 9.8)
- [CVE-2026-70912](https://insights.sbomify.com/CVE-2026-70912/): Missing authorization in Oracle Hyperion Financial Management (medium 5.3)
- [CVE-2026-70911](https://insights.sbomify.com/CVE-2026-70911/): Information disclosure in Oracle Hyperion Financial Management (medium 5.3)
- [CVE-2026-70910](https://insights.sbomify.com/CVE-2026-70910/): Missing authorization in Siebel CRM Integration (high 7.5)
- [CVE-2026-7091](https://insights.sbomify.com/CVE-2026-7091/): code-projects Invoice System in Laravel User Management user improper authorization (medium 5.3)
- [CVE-2026-70909](https://insights.sbomify.com/CVE-2026-70909/): Missing authorization in Oracle Hyperion Financial Management (high 8.2)
- [CVE-2026-70908](https://insights.sbomify.com/CVE-2026-70908/): Denial of service in Helidon (high 7.5)
- [CVE-2026-70907](https://insights.sbomify.com/CVE-2026-70907/): Denial of service in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition (medium 5.3)
- [CVE-2026-70906](https://insights.sbomify.com/CVE-2026-70906/): Denial of service in Oracle Java SE (high 7.5)
- [CVE-2026-70905](https://insights.sbomify.com/CVE-2026-70905/): Auth bypass in Oracle Access Manager (critical 9.8)
- [CVE-2026-70904](https://insights.sbomify.com/CVE-2026-70904/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.1)
- [CVE-2026-70903](https://insights.sbomify.com/CVE-2026-70903/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.7)
- [CVE-2026-70902](https://insights.sbomify.com/CVE-2026-70902/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.1)
- [CVE-2026-70901](https://insights.sbomify.com/CVE-2026-70901/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.1)
- [CVE-2026-70900](https://insights.sbomify.com/CVE-2026-70900/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.7)
- [CVE-2026-7090](https://insights.sbomify.com/CVE-2026-7090/): code-projects Chat System send_message.php cross site scripting (medium 4.8)
- [CVE-2026-70899](https://insights.sbomify.com/CVE-2026-70899/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.8)
- [CVE-2026-70898](https://insights.sbomify.com/CVE-2026-70898/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.4)
- [CVE-2026-70897](https://insights.sbomify.com/CVE-2026-70897/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.2)
- [CVE-2026-70896](https://insights.sbomify.com/CVE-2026-70896/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.5)
- [CVE-2026-70895](https://insights.sbomify.com/CVE-2026-70895/): Missing authorization in Oracle Hyperion Data Relationship Management (medium 6.5)
- [CVE-2026-70894](https://insights.sbomify.com/CVE-2026-70894/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.7)
- [CVE-2026-70893](https://insights.sbomify.com/CVE-2026-70893/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.2)
- [CVE-2026-70892](https://insights.sbomify.com/CVE-2026-70892/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.2)
- [CVE-2026-70891](https://insights.sbomify.com/CVE-2026-70891/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.5)
- [CVE-2026-70890](https://insights.sbomify.com/CVE-2026-70890/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.5)
- [CVE-2026-7089](https://insights.sbomify.com/CVE-2026-7089/): code-projects Home Service System Appointment Booking booking.php cross site scripting (medium 5.3)
- [CVE-2026-70889](https://insights.sbomify.com/CVE-2026-70889/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.5)
- [CVE-2026-70888](https://insights.sbomify.com/CVE-2026-70888/): Missing authorization in Oracle Hyperion Data Relationship Management (medium 6.6)
- [CVE-2026-70887](https://insights.sbomify.com/CVE-2026-70887/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.2)
- [CVE-2026-70886](https://insights.sbomify.com/CVE-2026-70886/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.8)
- [CVE-2026-70885](https://insights.sbomify.com/CVE-2026-70885/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.5)
- [CVE-2026-70884](https://insights.sbomify.com/CVE-2026-70884/): Missing authorization in Oracle Hyperion Data Relationship Management (critical 9.1)
- [CVE-2026-70883](https://insights.sbomify.com/CVE-2026-70883/): Missing authorization in Oracle Hyperion Data Relationship Management (critical 9.1)
- [CVE-2026-70882](https://insights.sbomify.com/CVE-2026-70882/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.7)
- [CVE-2026-70881](https://insights.sbomify.com/CVE-2026-70881/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.1)
- [CVE-2026-70880](https://insights.sbomify.com/CVE-2026-70880/): Missing authorization in Oracle Hyperion Data Relationship Management (critical 10.0)
- [CVE-2026-7088](https://insights.sbomify.com/CVE-2026-7088/): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (medium 6.9)
- [CVE-2026-70879](https://insights.sbomify.com/CVE-2026-70879/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.8)
- [CVE-2026-70878](https://insights.sbomify.com/CVE-2026-70878/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.1)
- [CVE-2026-70877](https://insights.sbomify.com/CVE-2026-70877/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.8)
- [CVE-2026-70876](https://insights.sbomify.com/CVE-2026-70876/): Missing authorization in Oracle Hyperion Data Relationship Management (critical 9.1)
- [CVE-2026-70875](https://insights.sbomify.com/CVE-2026-70875/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.5)
- [CVE-2026-70874](https://insights.sbomify.com/CVE-2026-70874/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.8)
- [CVE-2026-70873](https://insights.sbomify.com/CVE-2026-70873/): Missing authorization in Oracle Hyperion Data Relationship Management (critical 9.8)
- [CVE-2026-70872](https://insights.sbomify.com/CVE-2026-70872/): Missing authorization in Oracle Hyperion Data Relationship Management (critical 9.1)
- [CVE-2026-70871](https://insights.sbomify.com/CVE-2026-70871/): Missing authorization in Oracle Hyperion Data Relationship Management (critical 9.8)
- [CVE-2026-70870](https://insights.sbomify.com/CVE-2026-70870/): Missing authorization in Oracle Hyperion Data Relationship Management (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/423/