Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 497 of 1013.
- CVE-2026-61211 Missing authorization in Oracle Database Server
- CVE-2026-61210 Missing authorization in PeopleSoft Enterprise SCM Manufacturing
- CVE-2026-6121 Tenda F451 httpd WrlclientSet stack-based overflow
- CVE-2026-61209 Privilege escalation in PeopleSoft In-Memory Project Discovery
- CVE-2026-61208 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61207 Missing authorization in PeopleSoft Enterprise SCM eProcurement
- CVE-2026-61206 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-61205 Missing authorization in PeopleSoft Enterprise SCM Purchasing
- CVE-2026-61204 Cross-site request forgery in PeopleSoft Enterprise FIN Program Management
- CVE-2026-61203 Missing authorization in PeopleSoft Enterprise FIN Expenses
- CVE-2026-61202 Other in Oracle Solaris
- CVE-2026-61201 Missing authorization in PeopleSoft Enterprise CRM Common Objects
- CVE-2026-61200 Missing authorization in Oracle Labor Distribution
- CVE-2026-6120 Tenda F451 httpd DhcpListClient fromDhcpListClient stack-based overflow
- CVE-2026-61199 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61198 Missing authorization in Oracle Learning Management
- CVE-2026-61197 Missing authorization in Oracle Identity Manager
- CVE-2026-61196 Auth bypass in Oracle Identity Manager
- CVE-2026-61195 Denial of service in Oracle Agile Engineering Data Management
- CVE-2026-61194 Denial of service in Oracle Agile Engineering Data Management
- CVE-2026-61193 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61192 Denial of service in Oracle Agile Engineering Data Management
- CVE-2026-61191 Missing authorization in Oracle Agile Engineering Data Management
- CVE-2026-61190 Missing authorization in Oracle Agile Engineering Data Management
- CVE-2026-6119 AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery
- CVE-2026-61189 Missing authorization in Oracle Agile Engineering Data Management
- CVE-2026-61188 Auth bypass in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-61187 Denial of service in Oracle Agile Engineering Data Management
- CVE-2026-61186 Missing authorization in Oracle Agile Engineering Data Management
- CVE-2026-61185 Information disclosure in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-61184 Missing authorization in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-61183 Auth bypass in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-61182 Privilege escalation in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-61181 Open redirect in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-61180 Auth bypass in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-6118 AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection
- CVE-2026-61179 Auth bypass in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-61178 Auth bypass in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-61177 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61176 Missing authorization in Oracle Product Lifecycle Analytics
- CVE-2026-61175 Missing authorization in Oracle Product Lifecycle Analytics
- CVE-2026-61174 Missing authorization in Oracle Product Lifecycle Analytics
- CVE-2026-61173 Missing authorization in Oracle Agile PLM
- CVE-2026-61172 Missing authorization in Oracle Agile PLM
- CVE-2026-61171 Missing authorization in Oracle Agile PLM
- CVE-2026-61170 Auth bypass in Oracle Agile PLM
- CVE-2026-6117 AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox
- CVE-2026-61169 Missing authorization in Oracle Agile PLM
- CVE-2026-61168 Auth bypass in Oracle Agile PLM
- CVE-2026-61167 Auth bypass in Oracle Agile PLM
- CVE-2026-61166 Missing authorization in Oracle Agile PLM
- CVE-2026-61165 Denial of service in Oracle Commerce Guided Search Platform Services
- CVE-2026-61164 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61163 Auth bypass in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61162 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61161 Auth bypass in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61160 Denial of service in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-6116 Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection
- CVE-2026-61159 Information disclosure in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61158 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61157 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61156 Missing authorization in Oracle Commerce Guided Search Platform Services
- CVE-2026-61155 Missing authorization in Oracle Commerce Guided Search Platform Services
- CVE-2026-61154 Auth bypass in Oracle Commerce Guided Search Platform Services
- CVE-2026-61153 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61152 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61151 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61150 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-6115 Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection
- CVE-2026-61149 Auth bypass in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61148 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61147 Denial of service in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61146 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61145 Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2026-61144 Denial of service in MySQL Cluster
- CVE-2026-61143 Other in Oracle Communications Convergent Charging Controller
- CVE-2026-61142 Missing authorization in Oracle Payroll
- CVE-2026-61141 Missing authorization in Oracle Advanced Benefits
- CVE-2026-61140 Auth bypass in Oracle WebCenter Sites
- CVE-2026-6114 Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection
- CVE-2026-61139 Missing authorization in Oracle Public Sector Financials (International)
- CVE-2026-61138 Missing authorization in Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-61137 Auth bypass in Oracle Commerce Platform
- CVE-2026-61136 Missing authorization in Oracle Commerce Platform
- CVE-2026-61135 Missing authorization in Oracle Commerce Platform
- CVE-2026-61134 Missing authorization in Oracle Commerce Platform
- CVE-2026-61133 Information disclosure in Oracle Commerce Platform
- CVE-2026-61132 Cross-site request forgery in Oracle Commerce Platform
- CVE-2026-61131 Auth bypass in Oracle Commerce Platform
- CVE-2026-61130 Missing authorization in Oracle Commerce Platform
- CVE-2026-6113 Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection
- CVE-2026-61129 Auth bypass in Oracle Commerce Platform
- CVE-2026-61128 Denial of service in MySQL Cluster
- CVE-2026-61127 Auth bypass in Oracle Communications Service Catalog and Design
- CVE-2026-61126 Privilege escalation in Oracle Communications Billing and Revenue Management
- CVE-2026-61125 Information disclosure in Oracle Configure to Order
- CVE-2026-61124 Missing authorization in Oracle WebCenter Portal
- CVE-2026-61123 Denial of service in Oracle HRMS (US)
- CVE-2026-61122 Missing authorization in Oracle HRMS (UK)
- CVE-2026-61121 Auth bypass in Oracle HRMS (UK)