Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 496 of 1013.
- CVE-2026-61302 Missing authorization in Oracle Business Intelligence Enterprise Edition
- CVE-2026-61301 Missing authorization in Oracle Process Manufacturing Financials
- CVE-2026-61300 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-6130 Command injection in chatbox
- CVE-2026-61299 Missing authorization in Oracle Process Manufacturing Logistics
- CVE-2026-61298 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-61297 Missing authorization in Oracle Customers Online
- CVE-2026-61296 Missing authorization in Oracle Enterprise Asset Management
- CVE-2026-61295 Missing authorization in Oracle WebCenter Content
- CVE-2026-61294 SQL injection in Oracle Common Applications Calendar
- CVE-2026-61293 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-61292 Information disclosure in Oracle U.S. Federal Financials
- CVE-2026-61291 Missing authorization in Oracle WebCenter Content
- CVE-2026-61290 Missing authorization in Oracle WebCenter Content
- CVE-2026-6129 zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication
- CVE-2026-61289 Missing authorization in Oracle Process Manufacturing Product Development
- CVE-2026-61288 Missing authorization in Oracle WebCenter Content
- CVE-2026-61287 Missing authorization in Oracle Process Manufacturing Systems
- CVE-2026-61286 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-61285 Missing authorization in Oracle Process Manufacturing Systems
- CVE-2026-61284 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-61283 Missing authorization in Oracle Bills of Material
- CVE-2026-61282 Missing authorization in Oracle Advanced Benefits
- CVE-2026-61281 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-61280 Missing authorization in Oracle Sales for Handhelds
- CVE-2026-6128 Cross-site scripting in All-in-One WP Migration Unlimited Extension
- CVE-2026-61279 Information disclosure in Oracle Proposals
- CVE-2026-61278 Missing authorization in Oracle Workflow
- CVE-2026-61277 Missing authorization in Oracle Marketing
- CVE-2026-61276 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-61275 Missing authorization in Oracle Product Hub
- CVE-2026-61274 Missing authorization in Oracle Product Hub
- CVE-2026-61273 Missing authorization in JD Edwards EnterpriseOne Tools
- CVE-2026-61272 Missing authorization in JD Edwards EnterpriseOne Tools
- CVE-2026-61271 Missing authorization in Oracle Document Management and Collaboration
- CVE-2026-61270 Missing authorization in JD Edwards EnterpriseOne Orchestrator
- CVE-2026-6127 Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API
- CVE-2026-61269 Missing authorization in Oracle Product Workbench
- CVE-2026-61268 Missing authorization in JD Edwards EnterpriseOne Tools
- CVE-2026-61267 Missing authorization in Oracle HCM Configuration Workbench
- CVE-2026-61266 SQL injection in Oracle Supply Chain Globalization
- CVE-2026-61265 Missing authorization in JD Edwards EnterpriseOne Orchestrator
- CVE-2026-61264 Missing authorization in Oracle Call Center Technology
- CVE-2026-61263 Missing authorization in Oracle Scripting
- CVE-2026-61262 Missing authorization in Oracle Teleservice
- CVE-2026-61261 Missing authorization in Oracle Knowledge Management
- CVE-2026-61260 Missing authorization in Oracle HRMS (UK)
- CVE-2026-6126 zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication
- CVE-2026-61259 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-61258 Missing authorization in Oracle Internet Directory
- CVE-2026-61257 Missing authorization in Oracle iSupport
- CVE-2026-61256 Missing authorization in Oracle Advanced Inbound Telephony
- CVE-2026-61255 Missing authorization in Oracle HRMS (New Zealand)
- CVE-2026-61254 Open redirect in Oracle HRMS (Republic of Korea)
- CVE-2026-61253 Cross-site request forgery in Oracle HRMS (Japanese)
- CVE-2026-61252 Missing authorization in Oracle HRMS (Hong Kong)
- CVE-2026-61251 Information disclosure in HRMS (Australia)
- CVE-2026-61250 Missing authorization in Oracle Payroll
- CVE-2026-6125 Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection
- CVE-2026-61249 Information disclosure in Oracle Learning Management
- CVE-2026-61248 Missing authorization in Oracle Internet Directory
- CVE-2026-61247 Missing authorization in Oracle Workflow
- CVE-2026-61246 Deserialization in Oracle Platform Security for Java
- CVE-2026-61245 Auth bypass in PeopleSoft Enterprise FIN Manufacturing Brazil
- CVE-2026-61244 Missing authorization in PeopleSoft Enterprise FIN Manufacturing Argentina
- CVE-2026-61243 Auth bypass in PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-61242 Missing authorization in PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-61241 Missing authorization in Oracle Internet Directory
- CVE-2026-61240 Missing authorization in PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-6124 Tenda F451 httpd SafeMacFilter fromSafeMacFilter stack-based overflow
- CVE-2026-61239 Missing authorization in PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-61238 Missing authorization in PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-61237 Missing authorization in PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-61236 Missing authorization in PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-61235 Missing authorization in PeopleSoft Enterprise HCM Global Payroll Switzerland
- CVE-2026-61234 Missing authorization in PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-61233 Auth bypass in PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-61232 Missing authorization in PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-61231 Privilege escalation in Oracle Virtual Directory
- CVE-2026-61230 Missing authorization in Oracle WebCenter Portal
- CVE-2026-6123 Tenda F451 httpd addressNat fromAddressNat stack-based overflow
- CVE-2026-61229 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61228 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61227 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61226 Other in Oracle Communications Converged Application Server
- CVE-2026-61225 Auth bypass in Oracle Communications Converged Application Server
- CVE-2026-61224 Missing authorization in Oracle Communications Converged Application Server
- CVE-2026-61223 Missing authorization in Oracle Communications Converged Application Server
- CVE-2026-61222 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61221 Missing authorization in Oracle Item Master
- CVE-2026-61220 Missing authorization in Oracle Banking Origination
- CVE-2026-6122 Tenda F451 httpd L7Prot frmL7ProtForm stack-based overflow
- CVE-2026-61219 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61218 Missing authorization in Oracle E-Business Suite Secure Enterprise Search
- CVE-2026-61217 Cross-site request forgery in Oracle Security Service
- CVE-2026-61216 Missing authorization in Oracle Payroll
- CVE-2026-61215 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61214 Information disclosure in Oracle HRMS (UK)
- CVE-2026-61213 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61212 Missing authorization in Oracle WebCenter Portal