Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 498 of 1013.
- CVE-2026-61120 Privilege escalation in Oracle HRMS (US)
- CVE-2026-6112 Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection
- CVE-2026-61119 Missing authorization in Oracle HRMS (UK)
- CVE-2026-61118 Missing authorization in Oracle Identity Manager
- CVE-2026-61117 Missing authorization in Oracle HRMS (UK)
- CVE-2026-61116 Information disclosure in Oracle Application Object Library
- CVE-2026-61115 Missing authorization in Oracle Order Management
- CVE-2026-61114 Privilege escalation in Oracle Application Object Library
- CVE-2026-61113 Missing authorization in Oracle Application Object Library
- CVE-2026-61112 Missing authorization in Oracle Order Management
- CVE-2026-61111 Missing authorization in Oracle Application Object Library
- CVE-2026-61110 Auth bypass in Oracle Applications DBA
- CVE-2026-6111 FoundationAgents MetaGPT common.py decode_image server-side request forgery
- CVE-2026-61109 Denial of service in MySQL Cluster
- CVE-2026-61108 Denial of service in MySQL Cluster
- CVE-2026-61107 Privilege escalation in Oracle Applications DBA
- CVE-2026-61106 Missing authorization in Oracle GoldenGate
- CVE-2026-61105 Missing authorization in Oracle Banking Trade Finance
- CVE-2026-61104 Information disclosure in PeopleSoft Enterprise CS Student Records
- CVE-2026-61103 Missing authorization in PeopleSoft Enterprise CS Campus Community
- CVE-2026-61102 Missing authorization in Oracle Banking Trade Finance
- CVE-2026-61101 Cross-site request forgery in Oracle MES for Process Manufacturing
- CVE-2026-61100 Auth bypass in Oracle WebCenter Enterprise Capture
- CVE-2026-6110 FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection
- CVE-2026-61099 Auth bypass in Oracle WebCenter Enterprise Capture
- CVE-2026-61098 Auth bypass in Oracle WebCenter Enterprise Capture
- CVE-2026-61097 Open redirect in Oracle Banking Trade Finance Process Management
- CVE-2026-61096 Missing authorization in MySQL Cluster
- CVE-2026-61095 Missing authorization in Oracle Communications Unified Inventory Management
- CVE-2026-61094 Missing authorization in MySQL Cluster
- CVE-2026-61093 Denial of service in MySQL Cluster
- CVE-2026-61092 Auth bypass in Oracle WebCenter Enterprise Capture
- CVE-2026-61091 Privilege escalation in Oracle Communications Billing and Revenue Management
- CVE-2026-61090 Privilege escalation in Oracle Project Foundation
- CVE-2026-6109 FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery
- CVE-2026-61089 Missing authorization in PeopleSoft Enterprise SCM Inventory
- CVE-2026-61088 Missing authorization in PeopleSoft Enterprise SCM Manufacturing
- CVE-2026-61087 Missing authorization in PeopleSoft Enterprise FIN Payables
- CVE-2026-61086 Missing authorization in PeopleSoft Enterprise SCM Order Management
- CVE-2026-61085 Missing authorization in PeopleSoft Enterprise SCM Inventory
- CVE-2026-61084 Missing authorization in Oracle GoldenGate
- CVE-2026-61083 Missing authorization in Oracle Performance Management
- CVE-2026-61082 Open redirect in MySQL Connectors
- CVE-2026-61081 Information disclosure in MySQL Cluster
- CVE-2026-61080 Missing authorization in Oracle Public Sector Human Resources
- CVE-2026-6108 1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injection
- CVE-2026-61079 Race condition in Oracle GoldenGate
- CVE-2026-61078 Open redirect in PeopleSoft Enterprise CC Common Application Objects
- CVE-2026-61077 Missing authorization in PeopleSoft Enterprise SCM Mobile Inventory Management
- CVE-2026-61076 Privilege escalation in PeopleSoft Enterprise HCM Talent Acquisition Manager
- CVE-2026-61075 Missing authorization in Oracle Self-Service Human Resources
- CVE-2026-61074 Auth bypass in PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-61073 Missing authorization in PeopleSoft Enterprise FIN Common Objects Brazil
- CVE-2026-61072 Missing authorization in PeopleSoft Enterprise FIN Staffing Front Office Brazil
- CVE-2026-61071 Missing authorization in PeopleSoft Enterprise FIN Engineering Argentina
- CVE-2026-61070 Denial of service in PeopleSoft Enterprise FIN Common Objects Argentina
- CVE-2026-6107 1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scripting
- CVE-2026-61069 Missing authorization in PeopleSoft Enterprise FIN General Ledger Argentina
- CVE-2026-61068 Missing authorization in PeopleSoft Enterprise FIN Billing Argentina
- CVE-2026-61067 Auth bypass in Oracle Access Manager
- CVE-2026-61066 Missing authorization in Oracle Identity Manager
- CVE-2026-61065 Auth bypass in Oracle Access Manager
- CVE-2026-61064 Missing authorization in Oracle iRecruitment
- CVE-2026-61063 Privilege escalation in PeopleSoft Enterprise SCM Supplier Contract Management
- CVE-2026-61062 Privilege escalation in PeopleSoft Enterprise FIN Cash Management
- CVE-2026-61061 Privilege escalation in Oracle JDeveloper
- CVE-2026-61060 Missing authorization in Oracle E-Business Suite Secure Enterprise Search
- CVE-2026-6106 1Panel-dev MaxKB Public Chat static_headers_middleware.py StaticHeadersMiddleware cross site scripting
- CVE-2026-61059 Missing authorization in PeopleSoft Enterprise SCM Order Management
- CVE-2026-61058 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61057 Missing authorization in PeopleSoft Enterprise FIN eSettlements
- CVE-2026-61056 Missing authorization in PeopleSoft Enterprise FIN Grants
- CVE-2026-61055 Privilege escalation in PeopleSoft Enterprise SCM Order Management
- CVE-2026-61054 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61053 Privilege escalation in Oracle Communications BRM - Elastic Charging Engine
- CVE-2026-61052 Denial of service in Oracle Solaris
- CVE-2026-61051 Missing authorization in Oracle Concurrent Processing
- CVE-2026-61050 Information disclosure in Oracle Production Scheduling
- CVE-2026-6105 perfree go-fastdfs-web doInstall InstallController.java improper authorization
- CVE-2026-61049 Auth bypass in Oracle Production Scheduling
- CVE-2026-61048 Denial of service in Oracle Inventory Optimization
- CVE-2026-61047 Missing authorization in Oracle Production Scheduling
- CVE-2026-61046 Missing authorization in Oracle Production Scheduling
- CVE-2026-61045 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61044 Missing authorization in Oracle Production Scheduling
- CVE-2026-61043 Missing authorization in Oracle Production Scheduling
- CVE-2026-61042 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61041 Missing authorization in Oracle Demantra Demand Management
- CVE-2026-61040 Missing authorization in Oracle WebCenter Sites
- CVE-2026-6104 Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding
- CVE-2026-61039 Missing authorization in Oracle Advanced Supply Chain Planning
- CVE-2026-61038 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61037 Missing authorization in Oracle Loans
- CVE-2026-61036 Missing authorization in Oracle HRMS (Norway)
- CVE-2026-61035 Missing authorization in Oracle Financials for the Americas
- CVE-2026-61034 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61033 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61032 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61031 Missing authorization in Oracle Financials Common Country
- CVE-2026-61030 Missing authorization in Oracle Process Manufacturing Product Development