# Vulnerabilities published in 2026 - [CVE-2026-7087](https://insights.sbomify.com/CVE-2026-7087/): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (medium 6.9) - [CVE-2026-70869](https://insights.sbomify.com/CVE-2026-70869/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 4.7) - [CVE-2026-70868](https://insights.sbomify.com/CVE-2026-70868/): Missing authorization in Oracle Application Testing Suite (high 8.1) - [CVE-2026-70867](https://insights.sbomify.com/CVE-2026-70867/): Missing authorization in Oracle Application Testing Suite (high 7.1) - [CVE-2026-70866](https://insights.sbomify.com/CVE-2026-70866/): Missing authorization in Oracle Application Testing Suite (high 7.8) - [CVE-2026-70865](https://insights.sbomify.com/CVE-2026-70865/): Missing authorization in Oracle Application Testing Suite (high 7.5) - [CVE-2026-70864](https://insights.sbomify.com/CVE-2026-70864/): Missing authorization in Oracle Application Testing Suite (high 7.6) - [CVE-2026-70863](https://insights.sbomify.com/CVE-2026-70863/): Missing authorization in Oracle Application Testing Suite (high 8.8) - [CVE-2026-70862](https://insights.sbomify.com/CVE-2026-70862/): Missing authorization in Oracle Application Testing Suite (critical 9.1) - [CVE-2026-70861](https://insights.sbomify.com/CVE-2026-70861/): Missing authorization in PeopleSoft Enterprise FIN Common Objects Brazil (high 7.2) - [CVE-2026-70860](https://insights.sbomify.com/CVE-2026-70860/): Information disclosure in PeopleSoft Enterprise FIN Common Objects Argentina (medium 5.9) - [CVE-2026-7086](https://insights.sbomify.com/CVE-2026-7086/): HBAI-Ltd Toonflow-app Storyboard Export replaceUrl.ts updateStoryboardUrl path traversal (medium 5.3) - [CVE-2026-70859](https://insights.sbomify.com/CVE-2026-70859/): Missing authorization in Siebel CRM Integration (high 8.5) - [CVE-2026-70858](https://insights.sbomify.com/CVE-2026-70858/): Missing authorization in Oracle WebCenter Content (high 7.1) - [CVE-2026-70857](https://insights.sbomify.com/CVE-2026-70857/): Missing authorization in Siebel CRM End User (high 7.7) - [CVE-2026-70856](https://insights.sbomify.com/CVE-2026-70856/): Missing authorization in Siebel CRM Deployment (high 7.5) - [CVE-2026-70855](https://insights.sbomify.com/CVE-2026-70855/): Missing authorization in Siebel Apps - Self Service (critical 9.3) - [CVE-2026-70854](https://insights.sbomify.com/CVE-2026-70854/): Missing authorization in Oracle Hyperion Financial Management (critical 9.1) - [CVE-2026-70853](https://insights.sbomify.com/CVE-2026-70853/): Missing authorization in Oracle Hyperion Financial Management (low 3.3) - [CVE-2026-70852](https://insights.sbomify.com/CVE-2026-70852/): Missing authorization in Oracle Demand Planning (high 8.2) - [CVE-2026-70851](https://insights.sbomify.com/CVE-2026-70851/): Denial of service in Oracle Hyperion Financial Management (low 3.1) - [CVE-2026-70850](https://insights.sbomify.com/CVE-2026-70850/): Missing authorization in Oracle Hyperion Financial Management (low 3.0) - [CVE-2026-7085](https://insights.sbomify.com/CVE-2026-7085/): HBAI-Ltd Toonflow-app downloadApp Endpoint downloadApp.ts z.url path traversal (low 2.3) - [CVE-2026-70849](https://insights.sbomify.com/CVE-2026-70849/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.5) - [CVE-2026-70848](https://insights.sbomify.com/CVE-2026-70848/): Privilege escalation in Oracle Hyperion Financial Management (low 3.7) - [CVE-2026-70847](https://insights.sbomify.com/CVE-2026-70847/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.5) - [CVE-2026-70846](https://insights.sbomify.com/CVE-2026-70846/): Missing authorization in Oracle Demand Planning (critical 9.6) - [CVE-2026-70845](https://insights.sbomify.com/CVE-2026-70845/): Missing authorization in Oracle Loans (high 7.1) - [CVE-2026-70844](https://insights.sbomify.com/CVE-2026-70844/): Missing authorization in Oracle Loans (high 7.1) - [CVE-2026-70843](https://insights.sbomify.com/CVE-2026-70843/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.8) - [CVE-2026-70842](https://insights.sbomify.com/CVE-2026-70842/): Privilege escalation in Oracle Hyperion Financial Management (high 8.4) - [CVE-2026-70841](https://insights.sbomify.com/CVE-2026-70841/): Privilege escalation in Oracle Hyperion Financial Management (medium 5.6) - [CVE-2026-70840](https://insights.sbomify.com/CVE-2026-70840/): Privilege escalation in Oracle Hyperion Financial Management (high 8.4) - [CVE-2026-7084](https://insights.sbomify.com/CVE-2026-7084/): HBAI-Ltd Toonflow-app getCodeByLink Endpoint getCodeByLink.ts fetch server-side request forgery (medium 5.3) - [CVE-2026-70839](https://insights.sbomify.com/CVE-2026-70839/): Missing authorization in Oracle Financials for EMEA (high 7.1) - [CVE-2026-70838](https://insights.sbomify.com/CVE-2026-70838/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.1) - [CVE-2026-70837](https://insights.sbomify.com/CVE-2026-70837/): Missing authorization in Oracle Financials for Asia/Pacific (high 7.1) - [CVE-2026-70836](https://insights.sbomify.com/CVE-2026-70836/): Privilege escalation in Oracle Hyperion Financial Management (medium 5.5) - [CVE-2026-70835](https://insights.sbomify.com/CVE-2026-70835/): Missing authorization in Oracle iRecruitment (high 8.1) - [CVE-2026-70834](https://insights.sbomify.com/CVE-2026-70834/): Privilege escalation in Oracle Hyperion Financial Management (high 7.2) - [CVE-2026-70833](https://insights.sbomify.com/CVE-2026-70833/): Missing authorization in Oracle Landed Cost Management (high 7.1) - [CVE-2026-70832](https://insights.sbomify.com/CVE-2026-70832/): Privilege escalation in Oracle Hyperion Financial Management (high 7.5) - [CVE-2026-70831](https://insights.sbomify.com/CVE-2026-70831/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.5) - [CVE-2026-70830](https://insights.sbomify.com/CVE-2026-70830/): Missing authorization in Oracle Process Manufacturing Systems (high 8.1) - [CVE-2026-7083](https://insights.sbomify.com/CVE-2026-7083/): likeadmin-likeshop likeadmin_php dataTable Admin API DataTableLists.php queryResult sql injection (medium 5.1) - [CVE-2026-70829](https://insights.sbomify.com/CVE-2026-70829/): Missing authorization in Oracle Process Manufacturing Systems (high 7.5) - [CVE-2026-70828](https://insights.sbomify.com/CVE-2026-70828/): Privilege escalation in Oracle Hyperion Financial Management (high 7.7) - [CVE-2026-70827](https://insights.sbomify.com/CVE-2026-70827/): Missing authorization in Oracle MES for Process Manufacturing (high 7.7) - [CVE-2026-70826](https://insights.sbomify.com/CVE-2026-70826/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.5) - [CVE-2026-70825](https://insights.sbomify.com/CVE-2026-70825/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.5) - [CVE-2026-70824](https://insights.sbomify.com/CVE-2026-70824/): Privilege escalation in Oracle Hyperion Financial Management (medium 6.5) - [CVE-2026-70823](https://insights.sbomify.com/CVE-2026-70823/): Privilege escalation in Oracle Hyperion Financial Management (high 7.4) - [CVE-2026-70822](https://insights.sbomify.com/CVE-2026-70822/): Privilege escalation in Oracle Hyperion Financial Management (high 7.5) - [CVE-2026-70821](https://insights.sbomify.com/CVE-2026-70821/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8) - [CVE-2026-70820](https://insights.sbomify.com/CVE-2026-70820/): Missing authorization in Oracle Call Center Technology (high 7.2) - [CVE-2026-7082](https://insights.sbomify.com/CVE-2026-7082/): Tenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow (high 8.7) - [CVE-2026-70819](https://insights.sbomify.com/CVE-2026-70819/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8) - [CVE-2026-70818](https://insights.sbomify.com/CVE-2026-70818/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8) - [CVE-2026-70817](https://insights.sbomify.com/CVE-2026-70817/): Privilege escalation in Oracle Hyperion Financial Management (critical 9.8) - [CVE-2026-70816](https://insights.sbomify.com/CVE-2026-70816/): Missing authorization in Oracle Financials for EMEA (high 7.1) - [CVE-2026-70815](https://insights.sbomify.com/CVE-2026-70815/): Missing authorization in Oracle Internet Procurement Connector (high 8.1) - [CVE-2026-70814](https://insights.sbomify.com/CVE-2026-70814/): Missing authorization in Oracle Call Center Technology (high 8.1) - [CVE-2026-70813](https://insights.sbomify.com/CVE-2026-70813/): Missing authorization in Oracle Call Center Technology (high 8.8) - [CVE-2026-70812](https://insights.sbomify.com/CVE-2026-70812/): Missing authorization in Oracle Call Center Technology (high 8.8) - [CVE-2026-70811](https://insights.sbomify.com/CVE-2026-70811/): Missing authorization in Oracle Purchasing (high 8.1) - [CVE-2026-70810](https://insights.sbomify.com/CVE-2026-70810/): Missing authorization in Oracle Scripting (high 7.5) - [CVE-2026-7081](https://insights.sbomify.com/CVE-2026-7081/): Tenda F456 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow (high 8.7) - [CVE-2026-70809](https://insights.sbomify.com/CVE-2026-70809/): Missing authorization in Oracle Scripting (high 7.1) - [CVE-2026-70808](https://insights.sbomify.com/CVE-2026-70808/): Missing authorization in Oracle Scripting (high 7.1) - [CVE-2026-70807](https://insights.sbomify.com/CVE-2026-70807/): Missing authorization in Oracle Call Center Technology (high 8.5) - [CVE-2026-70806](https://insights.sbomify.com/CVE-2026-70806/): Missing authorization in Oracle E-Business Tax (high 7.1) - [CVE-2026-70805](https://insights.sbomify.com/CVE-2026-70805/): Missing authorization in Oracle Project Planning and Control (high 8.1) - [CVE-2026-70804](https://insights.sbomify.com/CVE-2026-70804/): Missing authorization in Oracle Public Sector Human Resources (high 7.7) - [CVE-2026-70803](https://insights.sbomify.com/CVE-2026-70803/): Missing authorization in Oracle General Ledger (high 7.6) - [CVE-2026-70802](https://insights.sbomify.com/CVE-2026-70802/): Missing authorization in Oracle Public Sector Human Resources (high 8.0) - [CVE-2026-70801](https://insights.sbomify.com/CVE-2026-70801/): Missing authorization in Oracle Flow Manufacturing (high 7.1) - [CVE-2026-70800](https://insights.sbomify.com/CVE-2026-70800/): Missing authorization in Oracle SDP Number Portability (high 7.3) - [CVE-2026-7080](https://insights.sbomify.com/CVE-2026-7080/): Tenda F456 httpd PPTPUserSetting fromPPTPUserSetting buffer overflow (high 8.7) - [CVE-2026-70799](https://insights.sbomify.com/CVE-2026-70799/): Missing authorization in Oracle SDP Number Portability (high 7.5) - [CVE-2026-70798](https://insights.sbomify.com/CVE-2026-70798/): Missing authorization in Oracle Purchasing (high 7.8) - [CVE-2026-70797](https://insights.sbomify.com/CVE-2026-70797/): Missing authorization in Oracle Purchasing (high 7.2) - [CVE-2026-70796](https://insights.sbomify.com/CVE-2026-70796/): Missing authorization in Oracle General Ledger (high 7.2) - [CVE-2026-70795](https://insights.sbomify.com/CVE-2026-70795/): Missing authorization in Oracle Applications Platform Engineering (high 8.1) - [CVE-2026-70794](https://insights.sbomify.com/CVE-2026-70794/): Missing authorization in Oracle Hyperion Financial Reporting (medium 4.7) - [CVE-2026-70793](https://insights.sbomify.com/CVE-2026-70793/): Missing authorization in Oracle Hyperion Financial Reporting (medium 4.2) - [CVE-2026-70792](https://insights.sbomify.com/CVE-2026-70792/): Missing authorization in Oracle Yard Management (high 8.8) - [CVE-2026-70791](https://insights.sbomify.com/CVE-2026-70791/): Missing authorization in Oracle Transportation Execution (high 7.6) - [CVE-2026-70790](https://insights.sbomify.com/CVE-2026-70790/): Missing authorization in Oracle Telecommunications Billing Integrator (high 7.4) - [CVE-2026-7079](https://insights.sbomify.com/CVE-2026-7079/): Tenda F456 httpd AdvSetWan fromAdvSetWan buffer overflow (high 8.7) - [CVE-2026-70789](https://insights.sbomify.com/CVE-2026-70789/): Missing authorization in Oracle Hyperion Financial Reporting (medium 5.9) - [CVE-2026-70788](https://insights.sbomify.com/CVE-2026-70788/): Missing authorization in Oracle Hyperion Financial Reporting (medium 6.5) - [CVE-2026-70787](https://insights.sbomify.com/CVE-2026-70787/): Missing authorization in Oracle Hyperion Financial Reporting (high 8.8) - [CVE-2026-70786](https://insights.sbomify.com/CVE-2026-70786/): Missing authorization in Oracle Service Fulfillment Manager (high 7.6) - [CVE-2026-70785](https://insights.sbomify.com/CVE-2026-70785/): Missing authorization in Oracle Hyperion Financial Reporting (low 3.7) - [CVE-2026-70784](https://insights.sbomify.com/CVE-2026-70784/): Missing authorization in Oracle Hyperion Financial Reporting (medium 5.3) - [CVE-2026-70783](https://insights.sbomify.com/CVE-2026-70783/): Missing authorization in Oracle Service Contracts (high 7.4) - [CVE-2026-70782](https://insights.sbomify.com/CVE-2026-70782/): Missing authorization in Oracle Labor Distribution (high 8.1) - [CVE-2026-70781](https://insights.sbomify.com/CVE-2026-70781/): Missing authorization in Oracle Proposals (high 7.2) - [CVE-2026-70780](https://insights.sbomify.com/CVE-2026-70780/): Missing authorization in Oracle Hyperion Financial Reporting (medium 6.8) - [CVE-2026-7078](https://insights.sbomify.com/CVE-2026-7078/): Tenda F456 httpd SetIpBind fromSetIpBind buffer overflow (high 8.7) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/424/