# Vulnerabilities published in 2026


- [CVE-2026-60935](https://insights.sbomify.com/CVE-2026-60935/): Missing authorization in Oracle WebCenter Content (high 8.7)
- [CVE-2026-60934](https://insights.sbomify.com/CVE-2026-60934/): Missing authorization in Oracle WebCenter Content (high 8.7)
- [CVE-2026-60933](https://insights.sbomify.com/CVE-2026-60933/): Missing authorization in Oracle WebCenter Content (high 7.4)
- [CVE-2026-60932](https://insights.sbomify.com/CVE-2026-60932/): Auth bypass in Oracle Labor Distribution (high 8.8)
- [CVE-2026-60931](https://insights.sbomify.com/CVE-2026-60931/): Auth bypass in Oracle Public Sector Financials (high 7.5)
- [CVE-2026-60930](https://insights.sbomify.com/CVE-2026-60930/): Information disclosure in Oracle Public Sector Financials (low 3.1)
- [CVE-2026-6093](https://insights.sbomify.com/CVE-2026-6093/): Corteza 2024.9.8 - SQL Injection in MSSQL JSON-path meta filter via incorrect T-SQL string escaping (medium 6.0)
- [CVE-2026-60929](https://insights.sbomify.com/CVE-2026-60929/): Missing authorization in Oracle Public Sector Financials (low 3.1)
- [CVE-2026-60928](https://insights.sbomify.com/CVE-2026-60928/): Missing authorization in Oracle WebCenter Content (high 8.4)
- [CVE-2026-60927](https://insights.sbomify.com/CVE-2026-60927/): Auth bypass in Oracle Public Sector Financials (high 7.5)
- [CVE-2026-60926](https://insights.sbomify.com/CVE-2026-60926/): Missing authorization in Oracle Public Sector Payroll (high 7.2)
- [CVE-2026-60925](https://insights.sbomify.com/CVE-2026-60925/): Missing authorization in Oracle Public Sector Payroll (high 7.2)
- [CVE-2026-60924](https://insights.sbomify.com/CVE-2026-60924/): Auth bypass in Oracle Public Sector Payroll (high 8.8)
- [CVE-2026-60923](https://insights.sbomify.com/CVE-2026-60923/): Information disclosure in Oracle Capacity (high 7.7)
- [CVE-2026-60922](https://insights.sbomify.com/CVE-2026-60922/): Information disclosure in Oracle iSupplier Portal (low 3.1)
- [CVE-2026-60921](https://insights.sbomify.com/CVE-2026-60921/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.8)
- [CVE-2026-60920](https://insights.sbomify.com/CVE-2026-60920/): Auth bypass in Oracle Customer Care (high 8.8)
- [CVE-2026-6092](https://insights.sbomify.com/CVE-2026-6092/): Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured (low 2.1)
- [CVE-2026-60919](https://insights.sbomify.com/CVE-2026-60919/): Information disclosure in Oracle iSupplier Portal (low 3.7)
- [CVE-2026-60918](https://insights.sbomify.com/CVE-2026-60918/): Missing authorization in Oracle Shipping Execution (high 7.2)
- [CVE-2026-60917](https://insights.sbomify.com/CVE-2026-60917/): Missing authorization in Oracle Inventory Management (high 8.1)
- [CVE-2026-60916](https://insights.sbomify.com/CVE-2026-60916/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.9)
- [CVE-2026-60915](https://insights.sbomify.com/CVE-2026-60915/): Missing authorization in Helidon (high 7.4)
- [CVE-2026-60914](https://insights.sbomify.com/CVE-2026-60914/): Missing authorization in Oracle Unified Directory (high 7.5)
- [CVE-2026-60913](https://insights.sbomify.com/CVE-2026-60913/): Information disclosure in Oracle Property Manager (low 1.9)
- [CVE-2026-60912](https://insights.sbomify.com/CVE-2026-60912/): Missing authorization in Oracle Property Manager (medium 5.4)
- [CVE-2026-60911](https://insights.sbomify.com/CVE-2026-60911/): Cross-site request forgery in Oracle Property Manager (medium 5.4)
- [CVE-2026-60910](https://insights.sbomify.com/CVE-2026-60910/): Missing authorization in Oracle Property Manager (high 7.2)
- [CVE-2026-6091](https://insights.sbomify.com/CVE-2026-6091/): Partial-chain verification accepts untrusted intermediate as trust anchor (medium 6.0)
- [CVE-2026-60909](https://insights.sbomify.com/CVE-2026-60909/): Missing authorization in Oracle WebCenter Content (high 7.6)
- [CVE-2026-60908](https://insights.sbomify.com/CVE-2026-60908/): Missing authorization in Oracle Installed Base (high 7.1)
- [CVE-2026-60907](https://insights.sbomify.com/CVE-2026-60907/): Missing authorization in Oracle Installed Base (medium 5.0)
- [CVE-2026-60906](https://insights.sbomify.com/CVE-2026-60906/): Missing authorization in Oracle WebCenter Content (high 7.5)
- [CVE-2026-60905](https://insights.sbomify.com/CVE-2026-60905/): Missing authorization in Oracle WebCenter Content (critical 9.6)
- [CVE-2026-60904](https://insights.sbomify.com/CVE-2026-60904/): Missing authorization in Oracle Installed Base (high 8.1)
- [CVE-2026-60903](https://insights.sbomify.com/CVE-2026-60903/): Missing authorization in Oracle WebCenter Content (high 8.7)
- [CVE-2026-60902](https://insights.sbomify.com/CVE-2026-60902/): Auth bypass in PeopleSoft Enterprise PeopleTools (high 7.0)
- [CVE-2026-60901](https://insights.sbomify.com/CVE-2026-60901/): Auth bypass in Oracle Project Intelligence (high 8.8)
- [CVE-2026-60900](https://insights.sbomify.com/CVE-2026-60900/): Privilege escalation in Oracle HCM Configuration Workbench (high 7.2)
- [CVE-2026-6090](https://insights.sbomify.com/CVE-2026-6090/): Auth bypass in Smart Connect (high 7.3)
- [CVE-2026-60899](https://insights.sbomify.com/CVE-2026-60899/): Information disclosure in Oracle HCM Configuration Workbench (medium 6.5)
- [CVE-2026-60898](https://insights.sbomify.com/CVE-2026-60898/): Auth bypass in Oracle Warehouse Management (high 8.8)
- [CVE-2026-60897](https://insights.sbomify.com/CVE-2026-60897/): Auth bypass in Oracle Payroll (high 8.8)
- [CVE-2026-60896](https://insights.sbomify.com/CVE-2026-60896/): Other in Oracle Work in Process (low 3.6)
- [CVE-2026-60895](https://insights.sbomify.com/CVE-2026-60895/): Missing authorization in Oracle Unified Directory (medium 6.8)
- [CVE-2026-60894](https://insights.sbomify.com/CVE-2026-60894/): Missing authorization in Oracle Payroll (high 7.5)
- [CVE-2026-60893](https://insights.sbomify.com/CVE-2026-60893/): Missing authorization in Oracle Payroll (medium 6.5)
- [CVE-2026-60892](https://insights.sbomify.com/CVE-2026-60892/): Missing authorization in Oracle HRMS (Norway) (medium 6.6)
- [CVE-2026-60891](https://insights.sbomify.com/CVE-2026-60891/): Information disclosure in Oracle Work in Process (low 1.9)
- [CVE-2026-60890](https://insights.sbomify.com/CVE-2026-60890/): Auth bypass in Oracle Payroll (high 8.8)
- [CVE-2026-6089](https://insights.sbomify.com/CVE-2026-6089/): WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery (medium 4.9)
- [CVE-2026-60889](https://insights.sbomify.com/CVE-2026-60889/): Missing authorization in Oracle Unified Directory (high 7.5)
- [CVE-2026-60888](https://insights.sbomify.com/CVE-2026-60888/): Information disclosure in Oracle Work in Process (medium 5.3)
- [CVE-2026-60887](https://insights.sbomify.com/CVE-2026-60887/): Information disclosure in PeopleSoft Enterprise PeopleTools (low 3.8)
- [CVE-2026-60886](https://insights.sbomify.com/CVE-2026-60886/): Missing authorization in Oracle Work in Process (high 7.6)
- [CVE-2026-60885](https://insights.sbomify.com/CVE-2026-60885/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 6.8)
- [CVE-2026-60884](https://insights.sbomify.com/CVE-2026-60884/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 4.4)
- [CVE-2026-60883](https://insights.sbomify.com/CVE-2026-60883/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 7.2)
- [CVE-2026-60882](https://insights.sbomify.com/CVE-2026-60882/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 5.3)
- [CVE-2026-60881](https://insights.sbomify.com/CVE-2026-60881/): Other in PeopleSoft Enterprise PeopleTools (medium 6.5)
- [CVE-2026-60880](https://insights.sbomify.com/CVE-2026-60880/): Missing authorization in Oracle Work in Process (critical 9.8)
- [CVE-2026-6088](https://insights.sbomify.com/CVE-2026-6088/): Stored Cross-Site Scripting in StockAgile by Novadigits technologies (medium 5.1)
- [CVE-2026-60879](https://insights.sbomify.com/CVE-2026-60879/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 8.8)
- [CVE-2026-60878](https://insights.sbomify.com/CVE-2026-60878/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 4.4)
- [CVE-2026-60877](https://insights.sbomify.com/CVE-2026-60877/): Missing authorization in Oracle Trade Management (high 8.1)
- [CVE-2026-60876](https://insights.sbomify.com/CVE-2026-60876/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 4.2)
- [CVE-2026-60875](https://insights.sbomify.com/CVE-2026-60875/): Missing authorization in Oracle Trade Management (high 8.1)
- [CVE-2026-60874](https://insights.sbomify.com/CVE-2026-60874/): Denial of service in PeopleSoft Enterprise PeopleTools (medium 4.2)
- [CVE-2026-60873](https://insights.sbomify.com/CVE-2026-60873/): Other in PeopleSoft Enterprise PeopleTools (high 7.2)
- [CVE-2026-60872](https://insights.sbomify.com/CVE-2026-60872/): Auth bypass in Oracle Order Management (high 8.8)
- [CVE-2026-60871](https://insights.sbomify.com/CVE-2026-60871/): Missing authorization in Oracle Risk Management (high 8.1)
- [CVE-2026-60870](https://insights.sbomify.com/CVE-2026-60870/): Missing authorization in Oracle Advanced Pricing (high 7.1)
- [CVE-2026-6087](https://insights.sbomify.com/CVE-2026-6087/): Stored Cross-Site Scripting in StockAgile by Novadigits technologies (medium 5.1)
- [CVE-2026-60869](https://insights.sbomify.com/CVE-2026-60869/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 6.8)
- [CVE-2026-60868](https://insights.sbomify.com/CVE-2026-60868/): Missing authorization in Oracle Advanced Pricing (high 7.1)
- [CVE-2026-60867](https://insights.sbomify.com/CVE-2026-60867/): Missing authorization in Oracle Advanced Pricing (high 8.1)
- [CVE-2026-60866](https://insights.sbomify.com/CVE-2026-60866/): Missing authorization in Service Delivery Platform (medium 6.5)
- [CVE-2026-60865](https://insights.sbomify.com/CVE-2026-60865/): Missing authorization in Service Delivery Platform (medium 6.8)
- [CVE-2026-60864](https://insights.sbomify.com/CVE-2026-60864/): Missing authorization in Oracle Order Management (medium 6.4)
- [CVE-2026-60863](https://insights.sbomify.com/CVE-2026-60863/): Auth bypass in Oracle Advanced Pricing (high 8.8)
- [CVE-2026-60862](https://insights.sbomify.com/CVE-2026-60862/): Missing authorization in Oracle Order Management (medium 6.8)
- [CVE-2026-60861](https://insights.sbomify.com/CVE-2026-60861/): Missing authorization in Service Delivery Platform (critical 9.6)
- [CVE-2026-60860](https://insights.sbomify.com/CVE-2026-60860/): Missing authorization in Service Delivery Platform (high 8.7)
- [CVE-2026-6086](https://insights.sbomify.com/CVE-2026-6086/): Stored Cross-Site Scripting in StockAgile by Novadigits technologies (medium 5.1)
- [CVE-2026-60859](https://insights.sbomify.com/CVE-2026-60859/): Missing authorization in Oracle Quoting (high 7.5)
- [CVE-2026-60858](https://insights.sbomify.com/CVE-2026-60858/): Missing authorization in Oracle Hyperion Calculation Manager (critical 9.8)
- [CVE-2026-60857](https://insights.sbomify.com/CVE-2026-60857/): Missing authorization in Oracle Contracts Integration (high 8.1)
- [CVE-2026-60856](https://insights.sbomify.com/CVE-2026-60856/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 7.4)
- [CVE-2026-60855](https://insights.sbomify.com/CVE-2026-60855/): Missing authorization in Oracle Quality (high 7.5)
- [CVE-2026-60854](https://insights.sbomify.com/CVE-2026-60854/): Missing authorization in Oracle Quality (high 8.2)
- [CVE-2026-60853](https://insights.sbomify.com/CVE-2026-60853/): Information disclosure in Helidon (low 3.7)
- [CVE-2026-60852](https://insights.sbomify.com/CVE-2026-60852/): Missing authorization in Oracle Lease and Finance Management (high 8.1)
- [CVE-2026-60850](https://insights.sbomify.com/CVE-2026-60850/): Missing authorization in Oracle Unified Directory (high 7.5)
- [CVE-2026-6085](https://insights.sbomify.com/CVE-2026-6085/): Stored Cross-Site Scripting in StockAgile by Novadigits technologies (medium 5.1)
- [CVE-2026-60849](https://insights.sbomify.com/CVE-2026-60849/): Missing authorization in Oracle Unified Directory (high 8.5)
- [CVE-2026-60848](https://insights.sbomify.com/CVE-2026-60848/): Missing authorization in Oracle Project Contracts (high 8.1)
- [CVE-2026-60847](https://insights.sbomify.com/CVE-2026-60847/): Privilege escalation in Oracle Order Entry (low 3.4)
- [CVE-2026-60846](https://insights.sbomify.com/CVE-2026-60846/): Other in Oracle Mobile Application Server (medium 6.7)
- [CVE-2026-60845](https://insights.sbomify.com/CVE-2026-60845/): Missing authorization in Oracle Mobile Application Server (high 7.2)
- [CVE-2026-60844](https://insights.sbomify.com/CVE-2026-60844/): Missing authorization in Oracle Customer Support (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/500/