Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 486 of 1013.
- CVE-2026-62571 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62570 Other in Oracle Hyperion Infrastructure Technology
- CVE-2026-6257 Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management
- CVE-2026-62569 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62568 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62567 Missing authorization in Oracle HRMS (UK)
- CVE-2026-62566 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62565 Missing authorization in Oracle HRMS (US)
- CVE-2026-62564 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62563 Open redirect in Oracle Work in Process
- CVE-2026-62562 Missing authorization in Oracle HRMS (US)
- CVE-2026-62561 Privilege escalation in Oracle HRMS (US)
- CVE-2026-62560 Missing authorization in Oracle HRMS (Norway)
- CVE-2026-6256 Credits Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
- CVE-2026-62559 Missing authorization in Oracle HRMS (US)
- CVE-2026-62558 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62557 Missing authorization in Oracle HRMS (UK)
- CVE-2026-62556 Missing authorization in Oracle HRMS (US)
- CVE-2026-62555 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62554 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62553 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62552 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62551 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62550 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-6255 Simple Owl Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Attribute
- CVE-2026-62549 Missing authorization in Oracle HRMS (UK)
- CVE-2026-62548 Privilege escalation in Oracle HRMS (US)
- CVE-2026-62547 Auth bypass in Oracle Workflow
- CVE-2026-62546 Missing authorization in Oracle Applications Framework
- CVE-2026-62545 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62544 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62543 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62542 Missing authorization in Oracle Advanced Benefits
- CVE-2026-62541 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62540 Missing authorization in Oracle Cost Management
- CVE-2026-62539 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62538 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62537 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62536 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62535 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62534 Auth bypass in Oracle Applications Framework
- CVE-2026-62533 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62532 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62531 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62530 Missing authorization in Oracle HRMS (France)
- CVE-2026-6253 proxy credentials leak over redirect-to proxy
- CVE-2026-62529 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62528 SQL injection in Oracle HCM Configuration Workbench
- CVE-2026-62527 SQL injection in Oracle Learning Management
- CVE-2026-62526 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62525 Missing authorization in Oracle Quality
- CVE-2026-62524 Missing authorization in Oracle HRMS (US)
- CVE-2026-62523 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62522 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62521 Missing authorization in Oracle HRMS (US)
- CVE-2026-62520 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-6252 Meta Field Block <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute
- CVE-2026-62519 Missing authorization in Oracle Succession planning
- CVE-2026-62518 Missing authorization in Oracle Production Scheduling
- CVE-2026-62517 Open redirect in Oracle Production Scheduling
- CVE-2026-62516 SQL injection in Oracle Demantra Demand Management
- CVE-2026-62515 Missing authorization in Oracle Advanced Planning Command Center
- CVE-2026-62514 Missing authorization in Oracle Process Manufacturing Regulatory Management
- CVE-2026-62513 Missing authorization in Oracle Process Manufacturing Regulatory Management
- CVE-2026-62512 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-62511 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62510 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-6251 Chaty Pro <= 3.5.5 - Authenticated (Subscriber+) SQL Injection via 'widget_id' Parameter
- CVE-2026-62509 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62508 Denial of service in Oracle Time and Labor
- CVE-2026-62507 Missing authorization in Oracle Time and Labor
- CVE-2026-62506 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62505 Missing authorization in Oracle Time and Labor
- CVE-2026-62504 Missing authorization in Oracle Time and Labor
- CVE-2026-62503 Missing authorization in Oracle Time and Labor
- CVE-2026-62502 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62501 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62500 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-6250 Authenticated Format String Injection on TP-Link Tapo C110
- CVE-2026-62499 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62498 Auth bypass in Oracle Flow Manufacturing
- CVE-2026-62497 Missing authorization in Oracle Flow Manufacturing
- CVE-2026-62496 Auth bypass in Oracle Yard Management
- CVE-2026-62495 Missing authorization in Oracle Process Manufacturing Process Execution
- CVE-2026-62494 Missing authorization in Oracle Time and Labor
- CVE-2026-62493 Auth bypass in Oracle Purchasing
- CVE-2026-62492 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62491 Missing authorization in Oracle Purchasing
- CVE-2026-62490 Information disclosure in Oracle Contracts Integration
- CVE-2026-6249 Vvveb CMS 1.0.8.2 Remote Code Execution via Media Upload
- CVE-2026-62489 Missing authorization in Oracle Contracts Integration
- CVE-2026-62488 Missing authorization in Oracle Contracts Integration
- CVE-2026-62487 Cross-site request forgery in Oracle Contracts Integration
- CVE-2026-62486 Other in Oracle Contracts Integration
- CVE-2026-62485 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62484 Missing authorization in Oracle Contracts Integration
- CVE-2026-62483 Missing authorization in Oracle Project Contracts
- CVE-2026-62482 Missing authorization in Oracle Public Sector Financials
- CVE-2026-62481 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62480 Missing authorization in Oracle Public Sector Financials