# Vulnerabilities published in 2026


- [CVE-2026-60748](https://insights.sbomify.com/CVE-2026-60748/): Missing authorization in Oracle General Ledger (high 7.6)
- [CVE-2026-60747](https://insights.sbomify.com/CVE-2026-60747/): Denial of service in MySQL Cluster (medium 6.2)
- [CVE-2026-60746](https://insights.sbomify.com/CVE-2026-60746/): Information disclosure in Oracle Order Management (medium 5.9)
- [CVE-2026-60745](https://insights.sbomify.com/CVE-2026-60745/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 4.4)
- [CVE-2026-60744](https://insights.sbomify.com/CVE-2026-60744/): Missing authorization in Oracle Cost Management (medium 6.8)
- [CVE-2026-60743](https://insights.sbomify.com/CVE-2026-60743/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 6.5)
- [CVE-2026-60742](https://insights.sbomify.com/CVE-2026-60742/): Auth bypass in PeopleSoft Enterprise PeopleTools (high 8.1)
- [CVE-2026-60741](https://insights.sbomify.com/CVE-2026-60741/): Missing authorization in Oracle Cost Management (high 8.1)
- [CVE-2026-60740](https://insights.sbomify.com/CVE-2026-60740/): Missing authorization in Oracle Cash Management (high 8.1)
- [CVE-2026-6074](https://insights.sbomify.com/CVE-2026-6074/): Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW) (critical 9.3)
- [CVE-2026-60739](https://insights.sbomify.com/CVE-2026-60739/): Missing authorization in Oracle Field Service (high 7.1)
- [CVE-2026-60738](https://insights.sbomify.com/CVE-2026-60738/): Missing authorization in Oracle Installed Base (high 8.8)
- [CVE-2026-60737](https://insights.sbomify.com/CVE-2026-60737/): Missing authorization in Oracle Web Services Manager (critical 9.1)
- [CVE-2026-60736](https://insights.sbomify.com/CVE-2026-60736/): Missing authorization in Oracle E-Business Intelligence (high 8.1)
- [CVE-2026-60735](https://insights.sbomify.com/CVE-2026-60735/): Missing authorization in Oracle Sales Offline (high 8.1)
- [CVE-2026-60734](https://insights.sbomify.com/CVE-2026-60734/): Missing authorization in Oracle Trading Community (high 7.2)
- [CVE-2026-60733](https://insights.sbomify.com/CVE-2026-60733/): Missing authorization in Oracle WebCenter Portal (high 7.7)
- [CVE-2026-60732](https://insights.sbomify.com/CVE-2026-60732/): Missing authorization in Oracle iReceivables (high 8.1)
- [CVE-2026-60731](https://insights.sbomify.com/CVE-2026-60731/): Missing authorization in Oracle WebCenter Portal (high 8.8)
- [CVE-2026-60730](https://insights.sbomify.com/CVE-2026-60730/): Missing authorization in Oracle WebCenter Portal (critical 9.9)
- [CVE-2026-6073](https://insights.sbomify.com/CVE-2026-6073/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (high 8.7)
- [CVE-2026-60729](https://insights.sbomify.com/CVE-2026-60729/): Missing authorization in Oracle WebCenter Portal (high 8.8)
- [CVE-2026-60728](https://insights.sbomify.com/CVE-2026-60728/): Missing authorization in Oracle WebCenter Portal (critical 9.1)
- [CVE-2026-60727](https://insights.sbomify.com/CVE-2026-60727/): Missing authorization in Oracle Identity Manager (critical 9.8)
- [CVE-2026-60726](https://insights.sbomify.com/CVE-2026-60726/): Missing authorization in Oracle Access Manager (high 8.8)
- [CVE-2026-60725](https://insights.sbomify.com/CVE-2026-60725/): Missing authorization in MySQL Router (high 7.4)
- [CVE-2026-60724](https://insights.sbomify.com/CVE-2026-60724/): Missing authorization in Oracle Customer Interaction History (medium 5.4)
- [CVE-2026-60723](https://insights.sbomify.com/CVE-2026-60723/): Missing authorization in Oracle Data Integrator (high 8.4)
- [CVE-2026-60722](https://insights.sbomify.com/CVE-2026-60722/): Missing authorization in Oracle Identity Manager (high 8.8)
- [CVE-2026-60721](https://insights.sbomify.com/CVE-2026-60721/): Auth bypass in Oracle Identity Manager (critical 9.8)
- [CVE-2026-60720](https://insights.sbomify.com/CVE-2026-60720/): Missing authorization in Oracle Identity Manager (critical 9.9)
- [CVE-2026-6072](https://insights.sbomify.com/CVE-2026-6072/): Oliver POS <= 2.4.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header (medium 6.5)
- [CVE-2026-60719](https://insights.sbomify.com/CVE-2026-60719/): Privilege escalation in Oracle BI Publisher (critical 9.9)
- [CVE-2026-60718](https://insights.sbomify.com/CVE-2026-60718/): Denial of service in MySQL Cluster (medium 6.5)
- [CVE-2026-60717](https://insights.sbomify.com/CVE-2026-60717/): Missing authorization in Oracle Complex Maintenance, Repair and Overhaul (medium 5.4)
- [CVE-2026-60716](https://insights.sbomify.com/CVE-2026-60716/): Missing authorization in Oracle Identity Manager (high 8.8)
- [CVE-2026-60715](https://insights.sbomify.com/CVE-2026-60715/): Missing authorization in Oracle Identity Manager (high 8.8)
- [CVE-2026-60714](https://insights.sbomify.com/CVE-2026-60714/): Missing authorization in Oracle Price Protection (high 8.1)
- [CVE-2026-60713](https://insights.sbomify.com/CVE-2026-60713/): Missing authorization in Siebel CRM Cloud Applications (medium 4.4)
- [CVE-2026-60712](https://insights.sbomify.com/CVE-2026-60712/): Missing authorization in Siebel CRM Cloud Applications (medium 6.5)
- [CVE-2026-60711](https://insights.sbomify.com/CVE-2026-60711/): Missing authorization in Siebel CRM Cloud Applications (critical 9.9)
- [CVE-2026-60710](https://insights.sbomify.com/CVE-2026-60710/): Missing authorization in Oracle EDI Gateway (high 8.1)
- [CVE-2026-6071](https://insights.sbomify.com/CVE-2026-6071/): Code Execution Vulnerability in Arena® (high 7.5)
- [CVE-2026-60709](https://insights.sbomify.com/CVE-2026-60709/): Missing authorization in Siebel CRM Cloud Applications (medium 4.2)
- [CVE-2026-60708](https://insights.sbomify.com/CVE-2026-60708/): Missing authorization in Oracle Process Manufacturing Financials (high 8.1)
- [CVE-2026-60707](https://insights.sbomify.com/CVE-2026-60707/): Missing authorization in Oracle Identity Manager (high 8.7)
- [CVE-2026-60706](https://insights.sbomify.com/CVE-2026-60706/): Missing authorization in Oracle Process Manufacturing Inventory (high 8.1)
- [CVE-2026-60705](https://insights.sbomify.com/CVE-2026-60705/): Missing authorization in Siebel CRM Cloud Applications (high 7.0)
- [CVE-2026-60704](https://insights.sbomify.com/CVE-2026-60704/): Missing authorization in Siebel CRM Cloud Applications (high 7.5)
- [CVE-2026-60703](https://insights.sbomify.com/CVE-2026-60703/): Missing authorization in Oracle Interaction Blending (high 7.1)
- [CVE-2026-60702](https://insights.sbomify.com/CVE-2026-60702/): Missing authorization in Oracle WebLogic Server (critical 9.9)
- [CVE-2026-60701](https://insights.sbomify.com/CVE-2026-60701/): Missing authorization in Oracle Universal Work Queue (medium 6.6)
- [CVE-2026-60700](https://insights.sbomify.com/CVE-2026-60700/): Missing authorization in Oracle Universal Work Queue (high 8.1)
- [CVE-2026-6070](https://insights.sbomify.com/CVE-2026-6070/): WP-BusinessDirectory <= 4.0.1 - Unauthenticated Arbitrary File Deletion via Path Traversal via '_filename' Parameter (critical 9.1)
- [CVE-2026-60699](https://insights.sbomify.com/CVE-2026-60699/): Missing authorization in Oracle WebLogic Server (high 8.6)
- [CVE-2026-60698](https://insights.sbomify.com/CVE-2026-60698/): Auth bypass in Oracle WebLogic Server (critical 9.8)
- [CVE-2026-60697](https://insights.sbomify.com/CVE-2026-60697/): Missing authorization in Oracle Site Hub (medium 6.3)
- [CVE-2026-60696](https://insights.sbomify.com/CVE-2026-60696/): Auth bypass in Oracle WebLogic Server (critical 9.8)
- [CVE-2026-60695](https://insights.sbomify.com/CVE-2026-60695/): Missing authorization in Oracle Enterprise Asset Management (medium 5.9)
- [CVE-2026-60694](https://insights.sbomify.com/CVE-2026-60694/): Missing authorization in Oracle Enterprise Asset Management (medium 5.4)
- [CVE-2026-60693](https://insights.sbomify.com/CVE-2026-60693/): Missing authorization in Oracle General Ledger (high 7.1)
- [CVE-2026-60692](https://insights.sbomify.com/CVE-2026-60692/): Missing authorization in Oracle Enterprise Asset Management (high 8.8)
- [CVE-2026-60691](https://insights.sbomify.com/CVE-2026-60691/): Missing authorization in Oracle Content Manager (high 8.1)
- [CVE-2026-60690](https://insights.sbomify.com/CVE-2026-60690/): Missing authorization in Siebel CRM Cloud Applications (high 7.7)
- [CVE-2026-6069](https://insights.sbomify.com/CVE-2026-6069/): CVE-2026-6069 (high 7.5)
- [CVE-2026-60689](https://insights.sbomify.com/CVE-2026-60689/): Missing authorization in Siebel CRM Cloud Applications (high 7.5)
- [CVE-2026-60688](https://insights.sbomify.com/CVE-2026-60688/): Missing authorization in Oracle Scheduler (medium 6.3)
- [CVE-2026-60687](https://insights.sbomify.com/CVE-2026-60687/): Missing authorization in Oracle U.S. Federal Financials (medium 6.8)
- [CVE-2026-60686](https://insights.sbomify.com/CVE-2026-60686/): Missing authorization in Oracle U.S. Federal Financials (high 8.1)
- [CVE-2026-60685](https://insights.sbomify.com/CVE-2026-60685/): Open redirect in Oracle iSupport (medium 6.1)
- [CVE-2026-60684](https://insights.sbomify.com/CVE-2026-60684/): Missing authorization in Oracle Applications Framework (medium 4.6)
- [CVE-2026-60683](https://insights.sbomify.com/CVE-2026-60683/): Missing authorization in Oracle Process Manufacturing Regulatory Management (high 7.7)
- [CVE-2026-60682](https://insights.sbomify.com/CVE-2026-60682/): Missing authorization in Oracle Hyperion Financial Reporting (medium 6.5)
- [CVE-2026-60681](https://insights.sbomify.com/CVE-2026-60681/): Missing authorization in Oracle Process Manufacturing Regulatory Management (high 8.8)
- [CVE-2026-60680](https://insights.sbomify.com/CVE-2026-60680/): Missing authorization in Oracle WebLogic Server (high 8.1)
- [CVE-2026-6068](https://insights.sbomify.com/CVE-2026-6068/): CVE-2026-6068 (medium 6.5)
- [CVE-2026-60679](https://insights.sbomify.com/CVE-2026-60679/): Auth bypass in Oracle WebLogic Server (high 7.5)
- [CVE-2026-60678](https://insights.sbomify.com/CVE-2026-60678/): Auth bypass in Oracle General Ledger (high 8.8)
- [CVE-2026-60677](https://insights.sbomify.com/CVE-2026-60677/): Missing authorization in Oracle Common Application Components (high 8.4)
- [CVE-2026-60676](https://insights.sbomify.com/CVE-2026-60676/): Missing authorization in Oracle Applications Framework (high 8.8)
- [CVE-2026-60675](https://insights.sbomify.com/CVE-2026-60675/): Missing authorization in Oracle Applications Framework (high 8.8)
- [CVE-2026-60674](https://insights.sbomify.com/CVE-2026-60674/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 8.2)
- [CVE-2026-60673](https://insights.sbomify.com/CVE-2026-60673/): Information disclosure in Oracle BI Publisher (medium 6.5)
- [CVE-2026-60672](https://insights.sbomify.com/CVE-2026-60672/): Auth bypass in Oracle WebLogic Server (critical 9.8)
- [CVE-2026-60671](https://insights.sbomify.com/CVE-2026-60671/): Missing authorization in Oracle Business Intelligence Enterprise Edition (high 8.6)
- [CVE-2026-60670](https://insights.sbomify.com/CVE-2026-60670/): Auth bypass in Oracle Applications Technology Stack (high 8.1)
- [CVE-2026-6067](https://insights.sbomify.com/CVE-2026-6067/): CVE-2026-6067 (high 7.5)
- [CVE-2026-60669](https://insights.sbomify.com/CVE-2026-60669/): Missing authorization in PeopleSoft Enterprise HCM Global Payroll Mexico (medium 5.9)
- [CVE-2026-60668](https://insights.sbomify.com/CVE-2026-60668/): Missing authorization in PeopleSoft Enterprise HCM Human Resources (high 8.2)
- [CVE-2026-60667](https://insights.sbomify.com/CVE-2026-60667/): Denial of service in PeopleSoft Enterprise HCM Human Resources (high 7.4)
- [CVE-2026-60666](https://insights.sbomify.com/CVE-2026-60666/): Missing authorization in PeopleSoft Enterprise HCM Human Resources (medium 6.8)
- [CVE-2026-60665](https://insights.sbomify.com/CVE-2026-60665/): Missing authorization in PeopleSoft Enterprise HCM Global Payroll Switzerland (high 8.2)
- [CVE-2026-60664](https://insights.sbomify.com/CVE-2026-60664/): Cross-site scripting in Oracle WebCenter Content (high 8.8)
- [CVE-2026-60663](https://insights.sbomify.com/CVE-2026-60663/): Missing authorization in Oracle WebCenter Content (critical 9.9)
- [CVE-2026-60662](https://insights.sbomify.com/CVE-2026-60662/): Information disclosure in Oracle Solaris (high 7.8)
- [CVE-2026-60661](https://insights.sbomify.com/CVE-2026-60661/): Privilege escalation in Oracle Solaris (high 7.8)
- [CVE-2026-6066](https://insights.sbomify.com/CVE-2026-6066/): Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center (high 7.1)
- [CVE-2026-60659](https://insights.sbomify.com/CVE-2026-60659/): Other in Oracle Solaris (high 7.1)
- [CVE-2026-60658](https://insights.sbomify.com/CVE-2026-60658/): Open redirect in Oracle WebCenter Content (high 7.5)
- [CVE-2026-60657](https://insights.sbomify.com/CVE-2026-60657/): Missing authorization in Oracle WebCenter Content (high 7.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/502/