# Vulnerabilities published in 2026


- [CVE-2026-60843](https://insights.sbomify.com/CVE-2026-60843/): Missing authorization in Oracle Citizen Interaction Center (medium 6.5)
- [CVE-2026-60842](https://insights.sbomify.com/CVE-2026-60842/): Open redirect in Oracle Knowledge Management (medium 6.1)
- [CVE-2026-60841](https://insights.sbomify.com/CVE-2026-60841/): Missing authorization in Oracle Unified Directory (high 8.5)
- [CVE-2026-60840](https://insights.sbomify.com/CVE-2026-60840/): Missing authorization in Oracle Demand Signal Repository (high 8.1)
- [CVE-2026-6084](https://insights.sbomify.com/CVE-2026-6084/): Stored Cross-Site Scripting in StockAgile by Novadigits technologies (medium 5.1)
- [CVE-2026-60839](https://insights.sbomify.com/CVE-2026-60839/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 5.5)
- [CVE-2026-60838](https://insights.sbomify.com/CVE-2026-60838/): Missing authorization in Oracle Price Protection (high 7.1)
- [CVE-2026-60837](https://insights.sbomify.com/CVE-2026-60837/): Privilege escalation in Oracle Price Protection (high 8.4)
- [CVE-2026-60836](https://insights.sbomify.com/CVE-2026-60836/): Privilege escalation in Oracle HCM Common Architecture (high 7.2)
- [CVE-2026-60835](https://insights.sbomify.com/CVE-2026-60835/): Information disclosure in Oracle Price Protection (medium 6.5)
- [CVE-2026-60834](https://insights.sbomify.com/CVE-2026-60834/): Missing authorization in Oracle Solaris (high 7.1)
- [CVE-2026-60833](https://insights.sbomify.com/CVE-2026-60833/): Privilege escalation in Oracle Solaris (high 7.0)
- [CVE-2026-60832](https://insights.sbomify.com/CVE-2026-60832/): Missing authorization in Oracle Interaction Blending (medium 4.1)
- [CVE-2026-60831](https://insights.sbomify.com/CVE-2026-60831/): Auth bypass in PeopleSoft Enterprise PeopleTools (high 8.1)
- [CVE-2026-60830](https://insights.sbomify.com/CVE-2026-60830/): Missing authorization in Oracle Workflow (medium 6.5)
- [CVE-2026-6083](https://insights.sbomify.com/CVE-2026-6083/): Stored Cross-Site Scripting in StockAgile by Novadigits technologies (medium 5.1)
- [CVE-2026-60829](https://insights.sbomify.com/CVE-2026-60829/): Missing authorization in Oracle Advanced Outbound Telephony (high 8.8)
- [CVE-2026-60828](https://insights.sbomify.com/CVE-2026-60828/): Missing authorization in Oracle Interaction Blending (high 7.2)
- [CVE-2026-60827](https://insights.sbomify.com/CVE-2026-60827/): Missing authorization in Oracle iSupport (high 7.4)
- [CVE-2026-60826](https://insights.sbomify.com/CVE-2026-60826/): Missing authorization in Oracle iSupport (medium 6.6)
- [CVE-2026-60825](https://insights.sbomify.com/CVE-2026-60825/): Missing authorization in Oracle iSupport (medium 6.6)
- [CVE-2026-60824](https://insights.sbomify.com/CVE-2026-60824/): Missing authorization in Oracle iSupport (high 7.7)
- [CVE-2026-60823](https://insights.sbomify.com/CVE-2026-60823/): Missing authorization in Oracle iSupport (high 7.4)
- [CVE-2026-60822](https://insights.sbomify.com/CVE-2026-60822/): Missing authorization in Oracle Enterprise Manager for Systems Infrastructure (high 7.8)
- [CVE-2026-60821](https://insights.sbomify.com/CVE-2026-60821/): Auth bypass in PeopleSoft Enterprise PeopleTools (critical 9.8)
- [CVE-2026-60820](https://insights.sbomify.com/CVE-2026-60820/): Other in Siebel CRM Integration (high 7.4)
- [CVE-2026-6082](https://insights.sbomify.com/CVE-2026-6082/): Stored Cross-Site Scripting in StockAgile by Novadigits technologies (medium 5.1)
- [CVE-2026-60819](https://insights.sbomify.com/CVE-2026-60819/): Information disclosure in PeopleSoft Enterprise PeopleTools (low 3.7)
- [CVE-2026-60817](https://insights.sbomify.com/CVE-2026-60817/): Missing authorization in Oracle iStore (high 8.1)
- [CVE-2026-60816](https://insights.sbomify.com/CVE-2026-60816/): Missing authorization in Oracle iStore (medium 5.3)
- [CVE-2026-60815](https://insights.sbomify.com/CVE-2026-60815/): Missing authorization in Oracle iStore (medium 6.1)
- [CVE-2026-60814](https://insights.sbomify.com/CVE-2026-60814/): Information disclosure in PeopleSoft Enterprise PeopleTools (low 3.9)
- [CVE-2026-60813](https://insights.sbomify.com/CVE-2026-60813/): Missing authorization in Oracle iStore (high 7.2)
- [CVE-2026-60812](https://insights.sbomify.com/CVE-2026-60812/): Information disclosure in Oracle Supply Chain Trading Connector (medium 6.5)
- [CVE-2026-60811](https://insights.sbomify.com/CVE-2026-60811/): Missing authorization in Oracle Supply Chain Trading Connector (medium 6.3)
- [CVE-2026-60810](https://insights.sbomify.com/CVE-2026-60810/): Missing authorization in Oracle Supply Chain Trading Connector (high 8.2)
- [CVE-2026-60809](https://insights.sbomify.com/CVE-2026-60809/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 4.2)
- [CVE-2026-60808](https://insights.sbomify.com/CVE-2026-60808/): Missing authorization in Siebel Apps - Marketing (high 7.5)
- [CVE-2026-60807](https://insights.sbomify.com/CVE-2026-60807/): Missing authorization in Oracle Bills of Material (high 8.0)
- [CVE-2026-60806](https://insights.sbomify.com/CVE-2026-60806/): Missing authorization in Oracle Cost Management (high 7.5)
- [CVE-2026-60805](https://insights.sbomify.com/CVE-2026-60805/): Missing authorization in Oracle Cost Management (medium 6.2)
- [CVE-2026-60804](https://insights.sbomify.com/CVE-2026-60804/): Missing authorization in Oracle E-Business Intelligence (low 2.0)
- [CVE-2026-60803](https://insights.sbomify.com/CVE-2026-60803/): Missing authorization in Siebel Apps - Marketing (high 7.4)
- [CVE-2026-60802](https://insights.sbomify.com/CVE-2026-60802/): Missing authorization in Oracle E-Business Intelligence (medium 6.1)
- [CVE-2026-60801](https://insights.sbomify.com/CVE-2026-60801/): Missing authorization in Oracle E-Business Intelligence (medium 5.9)
- [CVE-2026-60800](https://insights.sbomify.com/CVE-2026-60800/): Missing authorization in Oracle Compensation Workbench (high 7.1)
- [CVE-2026-6080](https://insights.sbomify.com/CVE-2026-6080/): Tutor LMS <= 3.9.8 - Authenticated (Admin+) SQL Injection via 'date' Parameter (medium 6.5)
- [CVE-2026-60799](https://insights.sbomify.com/CVE-2026-60799/): Missing authorization in Oracle Compensation Workbench (high 7.1)
- [CVE-2026-60798](https://insights.sbomify.com/CVE-2026-60798/): Missing authorization in Siebel CRM Deployment (high 8.5)
- [CVE-2026-60797](https://insights.sbomify.com/CVE-2026-60797/): Missing authorization in Siebel CRM Integration (high 7.4)
- [CVE-2026-60796](https://insights.sbomify.com/CVE-2026-60796/): Missing authorization in Siebel CRM Integration (high 8.2)
- [CVE-2026-60795](https://insights.sbomify.com/CVE-2026-60795/): Missing authorization in Oracle iSetup (medium 6.8)
- [CVE-2026-60794](https://insights.sbomify.com/CVE-2026-60794/): Missing authorization in Oracle TeleSales (medium 5.4)
- [CVE-2026-60793](https://insights.sbomify.com/CVE-2026-60793/): Missing authorization in Oracle TeleSales (high 8.1)
- [CVE-2026-60792](https://insights.sbomify.com/CVE-2026-60792/): Missing authorization in Siebel CRM Deployment (high 7.4)
- [CVE-2026-60791](https://insights.sbomify.com/CVE-2026-60791/): Missing authorization in Siebel CRM Deployment (high 8.1)
- [CVE-2026-60790](https://insights.sbomify.com/CVE-2026-60790/): Missing authorization in Oracle Sales Offline (high 8.0)
- [CVE-2026-6079](https://insights.sbomify.com/CVE-2026-6079/): Material Dashboard <= 1.4.10 - Missing Authorization to Unauthenticated Task Enumeration, Execution, and Deletion (high 7.3)
- [CVE-2026-60789](https://insights.sbomify.com/CVE-2026-60789/): Missing authorization in Oracle Sales Offline (high 8.8)
- [CVE-2026-60788](https://insights.sbomify.com/CVE-2026-60788/): Missing authorization in Oracle Sales Offline (high 8.3)
- [CVE-2026-60787](https://insights.sbomify.com/CVE-2026-60787/): Missing authorization in Oracle Receivables (high 7.2)
- [CVE-2026-60786](https://insights.sbomify.com/CVE-2026-60786/): Missing authorization in Oracle Receivables (high 7.2)
- [CVE-2026-60785](https://insights.sbomify.com/CVE-2026-60785/): Missing authorization in Oracle iReceivables (high 8.1)
- [CVE-2026-60784](https://insights.sbomify.com/CVE-2026-60784/): Missing authorization in Oracle Trading Community (high 8.1)
- [CVE-2026-60783](https://insights.sbomify.com/CVE-2026-60783/): Missing authorization in Oracle iReceivables (high 8.8)
- [CVE-2026-60782](https://insights.sbomify.com/CVE-2026-60782/): Missing authorization in Oracle Payments (critical 9.8)
- [CVE-2026-60781](https://insights.sbomify.com/CVE-2026-60781/): Missing authorization in Oracle Payments (high 7.1)
- [CVE-2026-60780](https://insights.sbomify.com/CVE-2026-60780/): Missing authorization in Oracle Workflow (high 8.1)
- [CVE-2026-60779](https://insights.sbomify.com/CVE-2026-60779/): Missing authorization in Siebel Apps - Marketing (high 8.1)
- [CVE-2026-60778](https://insights.sbomify.com/CVE-2026-60778/): Missing authorization in Oracle Payments (high 8.1)
- [CVE-2026-60777](https://insights.sbomify.com/CVE-2026-60777/): Missing authorization in Oracle Application Object Library (medium 6.3)
- [CVE-2026-60776](https://insights.sbomify.com/CVE-2026-60776/): Other in Oracle Application Object Library (medium 6.7)
- [CVE-2026-60775](https://insights.sbomify.com/CVE-2026-60775/): Other in Pasta (medium 6.7)
- [CVE-2026-60774](https://insights.sbomify.com/CVE-2026-60774/): Missing authorization in Oracle Applications Framework (high 7.1)
- [CVE-2026-60773](https://insights.sbomify.com/CVE-2026-60773/): Missing authorization in Oracle Application Object Library (critical 9.6)
- [CVE-2026-60772](https://insights.sbomify.com/CVE-2026-60772/): Missing authorization in Oracle Financials Common Modules (high 7.1)
- [CVE-2026-60771](https://insights.sbomify.com/CVE-2026-60771/): Missing authorization in Oracle Complex Maintenance, Repair and Overhaul (high 8.1)
- [CVE-2026-60770](https://insights.sbomify.com/CVE-2026-60770/): Missing authorization in Oracle Application Object Library (high 7.5)
- [CVE-2026-60769](https://insights.sbomify.com/CVE-2026-60769/): Missing authorization in Oracle General Ledger (high 7.5)
- [CVE-2026-60768](https://insights.sbomify.com/CVE-2026-60768/): Missing authorization in Oracle Applications Framework (high 8.1)
- [CVE-2026-60767](https://insights.sbomify.com/CVE-2026-60767/): Missing authorization in Siebel Apps - Marketing (high 8.8)
- [CVE-2026-60766](https://insights.sbomify.com/CVE-2026-60766/): Missing authorization in Siebel CRM Integration (high 7.4)
- [CVE-2026-60765](https://insights.sbomify.com/CVE-2026-60765/): Auth bypass in Siebel Apps - Marketing (high 7.5)
- [CVE-2026-60764](https://insights.sbomify.com/CVE-2026-60764/): Missing authorization in Oracle Financials Common Modules (high 8.1)
- [CVE-2026-60763](https://insights.sbomify.com/CVE-2026-60763/): Missing authorization in Oracle Applications Manager (high 8.4)
- [CVE-2026-60762](https://insights.sbomify.com/CVE-2026-60762/): Missing authorization in Oracle Applications Technology Stack (medium 5.7)
- [CVE-2026-60761](https://insights.sbomify.com/CVE-2026-60761/): Missing authorization in Oracle Applications DBA (medium 6.5)
- [CVE-2026-60760](https://insights.sbomify.com/CVE-2026-60760/): Missing authorization in Oracle Enterprise Asset Management (medium 4.2)
- [CVE-2026-60759](https://insights.sbomify.com/CVE-2026-60759/): Missing authorization in Oracle Internet Procurement Connector (high 7.4)
- [CVE-2026-60758](https://insights.sbomify.com/CVE-2026-60758/): Missing authorization in Siebel Artificial Intelligence (high 8.5)
- [CVE-2026-60757](https://insights.sbomify.com/CVE-2026-60757/): Missing authorization in Siebel CRM End User (high 8.1)
- [CVE-2026-60756](https://insights.sbomify.com/CVE-2026-60756/): Missing authorization in Oracle EDI Gateway (high 8.1)
- [CVE-2026-60755](https://insights.sbomify.com/CVE-2026-60755/): Missing authorization in Oracle Assets (high 7.2)
- [CVE-2026-60754](https://insights.sbomify.com/CVE-2026-60754/): Missing authorization in Siebel Apps - Marketing (critical 9.1)
- [CVE-2026-60753](https://insights.sbomify.com/CVE-2026-60753/): Missing authorization in Siebel CRM Deployment (high 7.8)
- [CVE-2026-60752](https://insights.sbomify.com/CVE-2026-60752/): Missing authorization in Siebel Apps - Marketing (high 7.1)
- [CVE-2026-60751](https://insights.sbomify.com/CVE-2026-60751/): Missing authorization in Siebel Apps - Marketing (high 8.8)
- [CVE-2026-60750](https://insights.sbomify.com/CVE-2026-60750/): Missing authorization in Oracle Payroll (high 7.7)
- [CVE-2026-6075](https://insights.sbomify.com/CVE-2026-6075/): Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form (high 8.1)
- [CVE-2026-60749](https://insights.sbomify.com/CVE-2026-60749/): Missing authorization in Oracle Assets (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/501/