Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 499 of 1013.
- CVE-2026-6103 Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
- CVE-2026-61029 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61028 Denial of service in Oracle Inventory Management
- CVE-2026-61027 Missing authorization in Oracle Cost Management
- CVE-2026-61026 Missing authorization in Oracle iRecruitment
- CVE-2026-61025 Missing authorization in Oracle iRecruitment
- CVE-2026-61024 Missing authorization in Oracle iRecruitment
- CVE-2026-61023 Privilege escalation in Oracle Inventory Management
- CVE-2026-61022 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61021 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61020 Missing authorization in Oracle Customers Online
- CVE-2026-6102 MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability
- CVE-2026-61019 Missing authorization in Oracle Customers Online
- CVE-2026-61018 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61017 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61016 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61015 Information disclosure in Oracle Time and Labor
- CVE-2026-61014 Information disclosure in Oracle Inventory Management
- CVE-2026-61013 Missing authorization in Oracle Time and Labor
- CVE-2026-61012 Missing authorization in Oracle Time and Labor
- CVE-2026-61011 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61010 Auth bypass in Oracle Process Manufacturing Systems
- CVE-2026-6101 Path traversal in AMP for WP – Accelerated Mobile Pages
- CVE-2026-61009 Missing authorization in Oracle Process Manufacturing Logistics
- CVE-2026-61008 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61007 Missing authorization in Oracle WebCenter Sites
- CVE-2026-61006 Privilege escalation in Oracle Process Manufacturing Logistics
- CVE-2026-61005 Missing authorization in Oracle Process Manufacturing Logistics
- CVE-2026-61004 Missing authorization in Oracle Landed Cost Management
- CVE-2026-61003 Missing authorization in Oracle Managed File Transfer
- CVE-2026-61002 Missing authorization in Oracle SOA Suite
- CVE-2026-61001 Missing authorization in Oracle Web Services Manager
- CVE-2026-61000 Missing authorization in Oracle Process Manufacturing Systems
- CVE-2026-6100 Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
- CVE-2026-60999 Missing authorization in Oracle Data Integrator
- CVE-2026-60998 Missing authorization in Oracle Identity Manager Connector
- CVE-2026-60997 Missing authorization in Oracle Universal Work Queue
- CVE-2026-60996 Missing authorization in Oracle Identity Manager Connector
- CVE-2026-60995 Missing authorization in Oracle Identity Manager Connector
- CVE-2026-60994 Missing authorization in Oracle Identity Manager Connector
- CVE-2026-60993 Missing authorization in Oracle Identity Manager Connector
- CVE-2026-60992 Missing authorization in Oracle Identity Manager Connector
- CVE-2026-60991 Missing authorization in Oracle Identity Manager Connector
- CVE-2026-60990 Missing authorization in Oracle Identity Manager Connector
- CVE-2026-60989 Auth bypass in Oracle Advanced Collections
- CVE-2026-60988 Missing authorization in Oracle Project Portfolio Analysis
- CVE-2026-60987 Missing authorization in Oracle Project Portfolio Analysis
- CVE-2026-60986 Missing authorization in Oracle Project Portfolio Analysis
- CVE-2026-60985 Missing authorization in Oracle Project Portfolio Analysis
- CVE-2026-60984 Missing authorization in Oracle Project Portfolio Analysis
- CVE-2026-60983 Missing authorization in Oracle WebCenter Content
- CVE-2026-60982 Missing authorization in Oracle US Federal Human Resources
- CVE-2026-60981 Missing authorization in Oracle WebCenter Content
- CVE-2026-60980 Missing authorization in Oracle WebCenter Content
- CVE-2026-60979 Auth bypass in Oracle Scripting
- CVE-2026-60978 Missing authorization in Oracle Scripting
- CVE-2026-60977 Missing authorization in Oracle WebLogic Server
- CVE-2026-60976 Missing authorization in Oracle Scripting
- CVE-2026-60975 Missing authorization in PeopleSoft Enterprise PeopleTools
- CVE-2026-60974 Missing authorization in Oracle E-Business Tax
- CVE-2026-60973 Privilege escalation in Oracle E-Business Tax
- CVE-2026-60972 Missing authorization in Oracle E-Business Tax
- CVE-2026-60971 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-60970 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-60969 Missing authorization in Oracle Unified Directory
- CVE-2026-60968 Information disclosure in PeopleSoft Enterprise PeopleTools
- CVE-2026-60967 Auth bypass in PeopleSoft Enterprise PeopleTools
- CVE-2026-60966 Missing authorization in Oracle Public Sector Human Resources
- CVE-2026-60965 Missing authorization in Oracle HRMS (France)
- CVE-2026-60964 Information disclosure in PeopleSoft Enterprise PeopleTools
- CVE-2026-60963 Missing authorization in Oracle Treasury
- CVE-2026-60962 Cross-site request forgery in Oracle Flow Manufacturing
- CVE-2026-60961 Missing authorization in Oracle WebCenter Content
- CVE-2026-60960 Missing authorization in Oracle SDP Number Portability
- CVE-2026-60959 Missing authorization in Oracle SDP Number Portability
- CVE-2026-60958 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-60957 Cross-site request forgery in Oracle Transportation Execution
- CVE-2026-60956 Missing authorization in JD Edwards EnterpriseOne US Payroll
- CVE-2026-60955 Missing authorization in Oracle WebCenter Content
- CVE-2026-60954 Missing authorization in Oracle WebCenter Content
- CVE-2026-60953 Missing authorization in Oracle Telecommunications Billing Integrator
- CVE-2026-60952 Auth bypass in Oracle Transportation Execution
- CVE-2026-60951 Missing authorization in Oracle Time and Labor
- CVE-2026-60950 Information disclosure in Oracle HRMS (Ireland)
- CVE-2026-6095 Orejime - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-032
- CVE-2026-60949 Missing authorization in Oracle WebCenter Content
- CVE-2026-60948 Missing authorization in Oracle Learning Management
- CVE-2026-60947 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-60946 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-60945 Open redirect in Oracle Learning Management
- CVE-2026-60944 Missing authorization in Oracle WebCenter Content
- CVE-2026-60943 Privilege escalation in Oracle Service Fulfillment Manager
- CVE-2026-60942 Missing authorization in Oracle Service Fulfillment Manager
- CVE-2026-60941 Privilege escalation in Oracle Service Fulfillment Manager
- CVE-2026-60940 Missing authorization in Oracle Service Contracts
- CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData
- CVE-2026-60939 Information disclosure in Oracle Project Contracts
- CVE-2026-60938 Privilege escalation in Oracle Labor Distribution
- CVE-2026-60937 Missing authorization in Oracle Labor Distribution
- CVE-2026-60936 Denial of service in Oracle Labor Distribution