# Vulnerabilities published in 2026 - [CVE-2026-70779](https://insights.sbomify.com/CVE-2026-70779/): Missing authorization in Oracle iSupplier Portal (high 7.4) - [CVE-2026-70778](https://insights.sbomify.com/CVE-2026-70778/): Missing authorization in Oracle Customer Care (high 8.7) - [CVE-2026-70777](https://insights.sbomify.com/CVE-2026-70777/): Missing authorization in Oracle iSupplier Portal (high 7.5) - [CVE-2026-70776](https://insights.sbomify.com/CVE-2026-70776/): Missing authorization in Oracle Hyperion Financial Reporting (low 2.6) - [CVE-2026-70775](https://insights.sbomify.com/CVE-2026-70775/): Missing authorization in Oracle Installed Base (medium 6.3) - [CVE-2026-70774](https://insights.sbomify.com/CVE-2026-70774/): Missing authorization in Oracle Warehouse Management (high 7.1) - [CVE-2026-70773](https://insights.sbomify.com/CVE-2026-70773/): Missing authorization in Oracle HCM Common Architecture (high 8.2) - [CVE-2026-70772](https://insights.sbomify.com/CVE-2026-70772/): Missing authorization in Oracle Warehouse Management (high 7.5) - [CVE-2026-70771](https://insights.sbomify.com/CVE-2026-70771/): Missing authorization in Oracle Warehouse Management (high 7.7) - [CVE-2026-70770](https://insights.sbomify.com/CVE-2026-70770/): Missing authorization in Oracle Warehouse Management (high 8.3) - [CVE-2026-7077](https://insights.sbomify.com/CVE-2026-7077/): itsourcecode Courier Management System edit_parcel.php sql injection (medium 6.9) - [CVE-2026-70769](https://insights.sbomify.com/CVE-2026-70769/): Missing authorization in Oracle Hyperion Financial Reporting (medium 6.5) - [CVE-2026-70768](https://insights.sbomify.com/CVE-2026-70768/): Missing authorization in Oracle Hyperion Financial Reporting (medium 6.1) - [CVE-2026-70767](https://insights.sbomify.com/CVE-2026-70767/): Missing authorization in Oracle Hyperion Financial Reporting (medium 6.5) - [CVE-2026-70766](https://insights.sbomify.com/CVE-2026-70766/): Missing authorization in Oracle Hyperion Financial Reporting (medium 5.4) - [CVE-2026-70765](https://insights.sbomify.com/CVE-2026-70765/): Missing authorization in Oracle Hyperion Financial Reporting (medium 6.1) - [CVE-2026-70764](https://insights.sbomify.com/CVE-2026-70764/): Missing authorization in Oracle General Ledger (high 7.6) - [CVE-2026-70763](https://insights.sbomify.com/CVE-2026-70763/): Missing authorization in Oracle Operations Intelligence (high 7.5) - [CVE-2026-70762](https://insights.sbomify.com/CVE-2026-70762/): Missing authorization in Oracle Risk Management (high 8.1) - [CVE-2026-70761](https://insights.sbomify.com/CVE-2026-70761/): Missing authorization in Oracle Risk Management (high 8.8) - [CVE-2026-70760](https://insights.sbomify.com/CVE-2026-70760/): Missing authorization in Oracle Order Management (high 7.1) - [CVE-2026-7076](https://insights.sbomify.com/CVE-2026-7076/): itsourcecode Courier Management System edit_branch.php sql injection (medium 6.9) - [CVE-2026-70759](https://insights.sbomify.com/CVE-2026-70759/): Missing authorization in Oracle Hyperion Financial Reporting (medium 5.4) - [CVE-2026-70758](https://insights.sbomify.com/CVE-2026-70758/): Missing authorization in Oracle Hyperion Financial Reporting (medium 5.3) - [CVE-2026-70757](https://insights.sbomify.com/CVE-2026-70757/): Auth bypass in Oracle WebLogic Server (critical 9.8) - [CVE-2026-70756](https://insights.sbomify.com/CVE-2026-70756/): Auth bypass in Oracle WebLogic Server (critical 9.8) - [CVE-2026-70755](https://insights.sbomify.com/CVE-2026-70755/): Missing authorization in Oracle Web Applications Desktop Integrator (medium 6.5) - [CVE-2026-70754](https://insights.sbomify.com/CVE-2026-70754/): Missing authorization in Oracle Hyperion Financial Reporting (medium 5.3) - [CVE-2026-70753](https://insights.sbomify.com/CVE-2026-70753/): Missing authorization in Oracle Hyperion Financial Reporting (medium 6.3) - [CVE-2026-70752](https://insights.sbomify.com/CVE-2026-70752/): Missing authorization in Oracle Hyperion Financial Reporting (high 7.5) - [CVE-2026-70751](https://insights.sbomify.com/CVE-2026-70751/): Missing authorization in Oracle Hyperion Financial Reporting (medium 6.8) - [CVE-2026-70750](https://insights.sbomify.com/CVE-2026-70750/): Missing authorization in Oracle Hyperion Financial Reporting (high 7.8) - [CVE-2026-7075](https://insights.sbomify.com/CVE-2026-7075/): itsourcecode Construction Management System locations.php sql injection (medium 6.9) - [CVE-2026-70749](https://insights.sbomify.com/CVE-2026-70749/): Missing authorization in Oracle Hyperion Financial Reporting (high 8.1) - [CVE-2026-70748](https://insights.sbomify.com/CVE-2026-70748/): Auth bypass in Oracle WebLogic Server (critical 9.8) - [CVE-2026-70747](https://insights.sbomify.com/CVE-2026-70747/): Missing authorization in Oracle Customers Online (high 8.8) - [CVE-2026-70746](https://insights.sbomify.com/CVE-2026-70746/): Missing authorization in Oracle Hyperion Financial Reporting (high 8.1) - [CVE-2026-70745](https://insights.sbomify.com/CVE-2026-70745/): Missing authorization in Oracle Hyperion Financial Reporting (critical 9.8) - [CVE-2026-70744](https://insights.sbomify.com/CVE-2026-70744/): Missing authorization in Oracle Hyperion Financial Reporting (high 8.1) - [CVE-2026-70743](https://insights.sbomify.com/CVE-2026-70743/): Missing authorization in Oracle Hyperion Financial Reporting (high 8.2) - [CVE-2026-70742](https://insights.sbomify.com/CVE-2026-70742/): Missing authorization in Oracle Hyperion Financial Reporting (high 8.8) - [CVE-2026-70741](https://insights.sbomify.com/CVE-2026-70741/): Missing authorization in Oracle Hyperion Financial Reporting (critical 9.1) - [CVE-2026-70740](https://insights.sbomify.com/CVE-2026-70740/): Missing authorization in Oracle Hyperion Financial Reporting (critical 9.8) - [CVE-2026-7074](https://insights.sbomify.com/CVE-2026-7074/): itsourcecode Construction Management System execute1.php sql injection (medium 6.9) - [CVE-2026-70739](https://insights.sbomify.com/CVE-2026-70739/): Missing authorization in Oracle Hyperion Financial Reporting (critical 9.8) - [CVE-2026-70738](https://insights.sbomify.com/CVE-2026-70738/): Missing authorization in Oracle Hyperion Profitability and Cost Management (high 8.1) - [CVE-2026-70737](https://insights.sbomify.com/CVE-2026-70737/): Missing authorization in Oracle Enterprise Manager for Systems Infrastructure (high 8.8) - [CVE-2026-70736](https://insights.sbomify.com/CVE-2026-70736/): Missing authorization in Oracle Hyperion Profitability and Cost Management (high 7.1) - [CVE-2026-70735](https://insights.sbomify.com/CVE-2026-70735/): Missing authorization in Oracle Hyperion Profitability and Cost Management (high 7.2) - [CVE-2026-70734](https://insights.sbomify.com/CVE-2026-70734/): Other in Oracle Autonomous Health Framework (high 7.4) - [CVE-2026-70733](https://insights.sbomify.com/CVE-2026-70733/): Missing authorization in Oracle Hyperion Profitability and Cost Management (high 7.1) - [CVE-2026-70732](https://insights.sbomify.com/CVE-2026-70732/): Missing authorization in Oracle Mobile Application Server (medium 6.5) - [CVE-2026-70731](https://insights.sbomify.com/CVE-2026-70731/): Missing authorization in Oracle Autonomous Health Framework (high 8.4) - [CVE-2026-70730](https://insights.sbomify.com/CVE-2026-70730/): Missing authorization in Oracle Hyperion Profitability and Cost Management (critical 9.1) - [CVE-2026-7073](https://insights.sbomify.com/CVE-2026-7073/): itsourcecode Construction Management System execute.php sql injection (medium 6.9) - [CVE-2026-70729](https://insights.sbomify.com/CVE-2026-70729/): Missing authorization in Oracle Teleservice (high 8.8) - [CVE-2026-70728](https://insights.sbomify.com/CVE-2026-70728/): Missing authorization in Oracle Autonomous Health Framework (high 8.5) - [CVE-2026-70727](https://insights.sbomify.com/CVE-2026-70727/): Missing authorization in Helidon (medium 5.3) - [CVE-2026-70726](https://insights.sbomify.com/CVE-2026-70726/): Missing authorization in Oracle Cash Management (medium 6.0) - [CVE-2026-70725](https://insights.sbomify.com/CVE-2026-70725/): Missing authorization in Oracle Advanced Inbound Telephony (high 7.6) - [CVE-2026-70724](https://insights.sbomify.com/CVE-2026-70724/): Missing authorization in MySQL Cluster (high 7.5) - [CVE-2026-70723](https://insights.sbomify.com/CVE-2026-70723/): Missing authorization in Oracle Hyperion Profitability and Cost Management (high 7.7) - [CVE-2026-70722](https://insights.sbomify.com/CVE-2026-70722/): Missing authorization in Oracle Advanced Inbound Telephony (high 8.2) - [CVE-2026-70721](https://insights.sbomify.com/CVE-2026-70721/): Missing authorization in Oracle Hyperion Profitability and Cost Management (high 8.6) - [CVE-2026-70720](https://insights.sbomify.com/CVE-2026-70720/): Missing authorization in Oracle Production Scheduling (medium 6.5) - [CVE-2026-7072](https://insights.sbomify.com/CVE-2026-7072/): CodePanda Source canteen_management_system login.php sql injection (medium 6.9) - [CVE-2026-70719](https://insights.sbomify.com/CVE-2026-70719/): Missing authorization in Oracle Hyperion Calculation Manager (medium 4.0) - [CVE-2026-70718](https://insights.sbomify.com/CVE-2026-70718/): Missing authorization in Oracle Bills of Material (high 8.5) - [CVE-2026-70717](https://insights.sbomify.com/CVE-2026-70717/): Missing authorization in Oracle Autonomous Health Framework (high 7.7) - [CVE-2026-70716](https://insights.sbomify.com/CVE-2026-70716/): Missing authorization in Helidon (medium 5.9) - [CVE-2026-70715](https://insights.sbomify.com/CVE-2026-70715/): Missing authorization in Oracle Autonomous Health Framework (high 8.8) - [CVE-2026-70714](https://insights.sbomify.com/CVE-2026-70714/): Missing authorization in Oracle Hyperion Calculation Manager (medium 4.1) - [CVE-2026-70713](https://insights.sbomify.com/CVE-2026-70713/): Missing authorization in Oracle iSetup (high 7.5) - [CVE-2026-70712](https://insights.sbomify.com/CVE-2026-70712/): Other in Oracle Agile Engineering Data Management (medium 6.4) - [CVE-2026-70711](https://insights.sbomify.com/CVE-2026-70711/): Missing authorization in Oracle Hyperion Calculation Manager (low 3.6) - [CVE-2026-70710](https://insights.sbomify.com/CVE-2026-70710/): Missing authorization in Oracle Sales Foundation (high 8.8) - [CVE-2026-7071](https://insights.sbomify.com/CVE-2026-7071/): CodeAstro Online Job Portal user-cvs file information disclosure (medium 6.9) - [CVE-2026-70709](https://insights.sbomify.com/CVE-2026-70709/): Missing authorization in Oracle Agile Engineering Data Management (medium 4.8) - [CVE-2026-70708](https://insights.sbomify.com/CVE-2026-70708/): Missing authorization in Oracle Sales Foundation (high 8.1) - [CVE-2026-70707](https://insights.sbomify.com/CVE-2026-70707/): Missing authorization in Oracle Sales for Handhelds (high 8.8) - [CVE-2026-70706](https://insights.sbomify.com/CVE-2026-70706/): Missing authorization in Oracle Sales (high 7.5) - [CVE-2026-70705](https://insights.sbomify.com/CVE-2026-70705/): Missing authorization in Oracle Hyperion Calculation Manager (high 7.1) - [CVE-2026-70704](https://insights.sbomify.com/CVE-2026-70704/): Missing authorization in Oracle Trading Community (high 8.1) - [CVE-2026-70703](https://insights.sbomify.com/CVE-2026-70703/): Missing authorization in Oracle Agile Engineering Data Management (high 8.2) - [CVE-2026-70702](https://insights.sbomify.com/CVE-2026-70702/): Missing authorization in Oracle Payments (high 8.2) - [CVE-2026-70701](https://insights.sbomify.com/CVE-2026-70701/): Missing authorization in Oracle Payables (high 8.1) - [CVE-2026-70700](https://insights.sbomify.com/CVE-2026-70700/): Denial of service in Oracle Payables (high 7.5) - [CVE-2026-7070](https://insights.sbomify.com/CVE-2026-7070/): code-projects Inventory Management System Login sql injection (medium 6.9) - [CVE-2026-70699](https://insights.sbomify.com/CVE-2026-70699/): Missing authorization in Oracle Payments (high 7.4) - [CVE-2026-70698](https://insights.sbomify.com/CVE-2026-70698/): Other in Oracle Agile Engineering Data Management (medium 6.7) - [CVE-2026-70697](https://insights.sbomify.com/CVE-2026-70697/): Missing authorization in Oracle Agile Engineering Data Management (high 7.0) - [CVE-2026-70696](https://insights.sbomify.com/CVE-2026-70696/): Missing authorization in Oracle Payments (high 7.5) - [CVE-2026-70695](https://insights.sbomify.com/CVE-2026-70695/): Missing authorization in Oracle Payments (high 7.7) - [CVE-2026-70694](https://insights.sbomify.com/CVE-2026-70694/): Missing authorization in Oracle Payments (high 7.7) - [CVE-2026-70693](https://insights.sbomify.com/CVE-2026-70693/): Missing authorization in Oracle Agile Engineering Data Management (medium 6.3) - [CVE-2026-70692](https://insights.sbomify.com/CVE-2026-70692/): Missing authorization in Oracle Marketing Encyclopedia System (high 7.7) - [CVE-2026-70691](https://insights.sbomify.com/CVE-2026-70691/): Missing authorization in Oracle Agile Engineering Data Management (high 7.5) - [CVE-2026-70690](https://insights.sbomify.com/CVE-2026-70690/): Missing authorization in Oracle HRMS (US) (high 8.0) - [CVE-2026-7069](https://insights.sbomify.com/CVE-2026-7069/): D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow (high 8.6) - [CVE-2026-70689](https://insights.sbomify.com/CVE-2026-70689/): Missing authorization in Oracle Essbase (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/425/