# Vulnerabilities published in 2026 - [CVE-2026-60656](https://insights.sbomify.com/CVE-2026-60656/): Missing authorization in Oracle WebCenter Content (high 8.8) - [CVE-2026-60655](https://insights.sbomify.com/CVE-2026-60655/): Missing authorization in Oracle WebCenter Content (high 8.8) - [CVE-2026-60654](https://insights.sbomify.com/CVE-2026-60654/): Auth bypass in Oracle WebCenter Content (high 8.8) - [CVE-2026-60653](https://insights.sbomify.com/CVE-2026-60653/): Missing authorization in Oracle WebCenter Content (high 8.1) - [CVE-2026-60652](https://insights.sbomify.com/CVE-2026-60652/): Missing authorization in Oracle WebCenter Content (high 8.0) - [CVE-2026-60651](https://insights.sbomify.com/CVE-2026-60651/): Missing authorization in Oracle WebCenter Content (high 8.8) - [CVE-2026-60650](https://insights.sbomify.com/CVE-2026-60650/): Cross-site scripting in Oracle WebCenter Content (high 8.0) - [CVE-2026-60649](https://insights.sbomify.com/CVE-2026-60649/): Missing authorization in Oracle WebCenter Content (critical 9.1) - [CVE-2026-60648](https://insights.sbomify.com/CVE-2026-60648/): Open redirect in Oracle WebCenter Content (high 8.0) - [CVE-2026-60647](https://insights.sbomify.com/CVE-2026-60647/): Missing authorization in Oracle WebCenter Content (high 7.1) - [CVE-2026-60646](https://insights.sbomify.com/CVE-2026-60646/): Cross-site scripting in Oracle WebCenter Content (high 8.0) - [CVE-2026-60645](https://insights.sbomify.com/CVE-2026-60645/): Missing authorization in Oracle WebCenter Content (high 7.2) - [CVE-2026-60644](https://insights.sbomify.com/CVE-2026-60644/): Missing authorization in Oracle WebCenter Content (critical 10.0) - [CVE-2026-60643](https://insights.sbomify.com/CVE-2026-60643/): Cross-site request forgery in Oracle WebCenter Content (high 8.0) - [CVE-2026-60642](https://insights.sbomify.com/CVE-2026-60642/): Open redirect in Oracle WebCenter Content (high 7.6) - [CVE-2026-60641](https://insights.sbomify.com/CVE-2026-60641/): Open redirect in Oracle WebCenter Content (high 7.6) - [CVE-2026-60640](https://insights.sbomify.com/CVE-2026-60640/): Open redirect in Oracle WebCenter Content (high 8.3) - [CVE-2026-6064](https://insights.sbomify.com/CVE-2026-6064/): Norton, Avast, and AVG local privilege escalation via link following in Data Shredder (high 7.3) - [CVE-2026-60639](https://insights.sbomify.com/CVE-2026-60639/): Cross-site scripting in Oracle WebCenter Content (high 8.8) - [CVE-2026-60638](https://insights.sbomify.com/CVE-2026-60638/): Cross-site scripting in Oracle WebCenter Content (high 8.8) - [CVE-2026-60637](https://insights.sbomify.com/CVE-2026-60637/): Cross-site scripting in Oracle WebCenter Content (high 8.8) - [CVE-2026-60636](https://insights.sbomify.com/CVE-2026-60636/): Cross-site scripting in Oracle WebCenter Content (high 8.8) - [CVE-2026-60635](https://insights.sbomify.com/CVE-2026-60635/): Cross-site scripting in Oracle WebCenter Content (high 8.8) - [CVE-2026-60634](https://insights.sbomify.com/CVE-2026-60634/): Cross-site scripting in Oracle WebCenter Content (high 8.8) - [CVE-2026-60633](https://insights.sbomify.com/CVE-2026-60633/): Cross-site scripting in Oracle WebCenter Content (high 8.8) - [CVE-2026-60632](https://insights.sbomify.com/CVE-2026-60632/): Open redirect in Oracle WebCenter Content (critical 9.3) - [CVE-2026-60631](https://insights.sbomify.com/CVE-2026-60631/): Cross-site request forgery in Oracle WebCenter Content (critical 9.3) - [CVE-2026-60630](https://insights.sbomify.com/CVE-2026-60630/): Missing authorization in Oracle APEX (medium 5.5) - [CVE-2026-6063](https://insights.sbomify.com/CVE-2026-6063/): Authorization Bypass Through User-Controlled Key in GitLab (medium 4.3) - [CVE-2026-60629](https://insights.sbomify.com/CVE-2026-60629/): Missing authorization in Oracle JDeveloper (high 7.5) - [CVE-2026-60628](https://insights.sbomify.com/CVE-2026-60628/): Missing authorization in JD Edwards EnterpriseOne Tools (low 3.7) - [CVE-2026-60627](https://insights.sbomify.com/CVE-2026-60627/): Missing authorization in JD Edwards EnterpriseOne Tools (critical 9.9) - [CVE-2026-60626](https://insights.sbomify.com/CVE-2026-60626/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 6.0) - [CVE-2026-60625](https://insights.sbomify.com/CVE-2026-60625/): Privilege escalation in Oracle Data Integrator (high 7.8) - [CVE-2026-60624](https://insights.sbomify.com/CVE-2026-60624/): Denial of service in MySQL Connectors (medium 6.5) - [CVE-2026-60623](https://insights.sbomify.com/CVE-2026-60623/): Auth bypass in MySQL Connectors (high 7.1) - [CVE-2026-60622](https://insights.sbomify.com/CVE-2026-60622/): Missing authorization in Oracle JDeveloper (high 7.5) - [CVE-2026-60621](https://insights.sbomify.com/CVE-2026-60621/): Auth bypass in JD Edwards EnterpriseOne Tools (high 8.1) - [CVE-2026-60620](https://insights.sbomify.com/CVE-2026-60620/): Denial of service in JD Edwards EnterpriseOne Configurator (medium 6.4) - [CVE-2026-6062](https://insights.sbomify.com/CVE-2026-6062/): IDOR in Jira plugin subscription edit endpoint (medium 6.4) - [CVE-2026-60619](https://insights.sbomify.com/CVE-2026-60619/): Missing authorization in JD Edwards EnterpriseOne HCM Foundation (high 7.5) - [CVE-2026-60618](https://insights.sbomify.com/CVE-2026-60618/): Missing authorization in JD Edwards EnterpriseOne Procurement and Subcontract Management (high 8.8) - [CVE-2026-60617](https://insights.sbomify.com/CVE-2026-60617/): Missing authorization in PeopleSoft Enterprise CS Campus Community (medium 6.5) - [CVE-2026-60616](https://insights.sbomify.com/CVE-2026-60616/): Missing authorization in PeopleSoft Enterprise CS Campus Community (medium 6.5) - [CVE-2026-60615](https://insights.sbomify.com/CVE-2026-60615/): Auth bypass in PeopleSoft Enterprise CS Campus Community (high 8.2) - [CVE-2026-60614](https://insights.sbomify.com/CVE-2026-60614/): Missing authorization in PeopleSoft Enterprise CS Campus Community (high 7.1) - [CVE-2026-60613](https://insights.sbomify.com/CVE-2026-60613/): Other in PeopleSoft Enterprise CS Student Records (medium 6.6) - [CVE-2026-60612](https://insights.sbomify.com/CVE-2026-60612/): Missing authorization in PeopleSoft Enterprise CS Financial Aid (medium 6.8) - [CVE-2026-60611](https://insights.sbomify.com/CVE-2026-60611/): Information disclosure in PeopleSoft Enterprise CS Campus Community (medium 5.3) - [CVE-2026-60610](https://insights.sbomify.com/CVE-2026-60610/): Information disclosure in PeopleSoft Enterprise CS Campus Community (medium 5.9) - [CVE-2026-60609](https://insights.sbomify.com/CVE-2026-60609/): Information disclosure in PeopleSoft Enterprise CS Campus Community (medium 6.5) - [CVE-2026-60608](https://insights.sbomify.com/CVE-2026-60608/): Missing authorization in PeopleSoft Enterprise CS Financial Aid (medium 6.1) - [CVE-2026-60607](https://insights.sbomify.com/CVE-2026-60607/): Information disclosure in PeopleSoft Enterprise CS Financial Aid (medium 5.5) - [CVE-2026-60606](https://insights.sbomify.com/CVE-2026-60606/): Missing authorization in PeopleSoft Enterprise CC Common Application Objects (critical 9.1) - [CVE-2026-60605](https://insights.sbomify.com/CVE-2026-60605/): Missing authorization in PeopleSoft Enterprise CS Student Records (high 7.5) - [CVE-2026-60604](https://insights.sbomify.com/CVE-2026-60604/): Missing authorization in PeopleSoft Enterprise CS Campus Community (high 7.5) - [CVE-2026-60603](https://insights.sbomify.com/CVE-2026-60603/): Missing authorization in PeopleSoft Enterprise CS Student Records (high 8.8) - [CVE-2026-60602](https://insights.sbomify.com/CVE-2026-60602/): Missing authorization in PeopleSoft Enterprise CS Student Financials (high 8.8) - [CVE-2026-60601](https://insights.sbomify.com/CVE-2026-60601/): Missing authorization in PeopleSoft Enterprise FIN Common Objects (medium 4.4) - [CVE-2026-60600](https://insights.sbomify.com/CVE-2026-60600/): Missing authorization in PeopleSoft Enterprise FIN Project Costing (high 7.8) - [CVE-2026-6060](https://insights.sbomify.com/CVE-2026-6060/): Possible DoS via SQL Box (medium 4.5) - [CVE-2026-60599](https://insights.sbomify.com/CVE-2026-60599/): Auth bypass in PeopleSoft Enterprise CS Student Records (high 8.1) - [CVE-2026-60598](https://insights.sbomify.com/CVE-2026-60598/): Auth bypass in PeopleSoft Enterprise CS Student Records (high 7.5) - [CVE-2026-60597](https://insights.sbomify.com/CVE-2026-60597/): Missing authorization in PeopleSoft Enterprise FIN Cash Management (high 8.7) - [CVE-2026-60596](https://insights.sbomify.com/CVE-2026-60596/): Missing authorization in PeopleSoft Enterprise FIN eSettlements (low 2.3) - [CVE-2026-60595](https://insights.sbomify.com/CVE-2026-60595/): Missing authorization in PeopleSoft Enterprise FIN Pay/Bill Management (medium 5.5) - [CVE-2026-60594](https://insights.sbomify.com/CVE-2026-60594/): Missing authorization in PeopleSoft Enterprise CS Campus Community (high 8.8) - [CVE-2026-60593](https://insights.sbomify.com/CVE-2026-60593/): Missing authorization in PeopleSoft Enterprise FIN Staffing Front Office (high 7.5) - [CVE-2026-60592](https://insights.sbomify.com/CVE-2026-60592/): Missing authorization in MySQL Cluster (high 8.2) - [CVE-2026-60591](https://insights.sbomify.com/CVE-2026-60591/): Missing authorization in Oracle Hospitality Simphony (critical 9.1) - [CVE-2026-60590](https://insights.sbomify.com/CVE-2026-60590/): Missing authorization in Oracle Hospitality Simphony (high 7.5) - [CVE-2026-6059](https://insights.sbomify.com/CVE-2026-6059/): Cross-site scripting in Aterm 19000T12BE (medium 4.8) - [CVE-2026-60589](https://insights.sbomify.com/CVE-2026-60589/): Information disclosure in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition (low 3.7) - [CVE-2026-60588](https://insights.sbomify.com/CVE-2026-60588/): Missing authorization in Oracle Enterprise Asset Management (medium 5.4) - [CVE-2026-60587](https://insights.sbomify.com/CVE-2026-60587/): Missing authorization in Oracle Project Foundation (medium 6.3) - [CVE-2026-60586](https://insights.sbomify.com/CVE-2026-60586/): Missing authorization in MySQL Connectors (high 7.7) - [CVE-2026-60585](https://insights.sbomify.com/CVE-2026-60585/): Other in MySQL Cluster (medium 6.6) - [CVE-2026-60584](https://insights.sbomify.com/CVE-2026-60584/): Missing authorization in Oracle Transportation Management (high 7.6) - [CVE-2026-60583](https://insights.sbomify.com/CVE-2026-60583/): Auth bypass in Oracle Transportation Management (high 8.8) - [CVE-2026-60582](https://insights.sbomify.com/CVE-2026-60582/): SQL injection in Oracle Enterprise Command Center Framework (high 8.3) - [CVE-2026-60581](https://insights.sbomify.com/CVE-2026-60581/): Missing authorization in Oracle Enterprise Command Center Framework (high 7.5) - [CVE-2026-60580](https://insights.sbomify.com/CVE-2026-60580/): Missing authorization in Oracle Enterprise Command Center Framework (high 8.8) - [CVE-2026-6058](https://insights.sbomify.com/CVE-2026-6058/): Denial of service in WRE6505 v2 firmware (medium 4.5) - [CVE-2026-60579](https://insights.sbomify.com/CVE-2026-60579/): Auth bypass in Oracle Enterprise Command Center Framework (high 8.0) - [CVE-2026-60578](https://insights.sbomify.com/CVE-2026-60578/): Auth bypass in Oracle Enterprise Command Center Framework (high 7.6) - [CVE-2026-60577](https://insights.sbomify.com/CVE-2026-60577/): Auth bypass in Oracle Enterprise Command Center Framework (high 7.1) - [CVE-2026-60576](https://insights.sbomify.com/CVE-2026-60576/): Privilege escalation in Oracle Enterprise Command Center Framework (high 7.2) - [CVE-2026-60575](https://insights.sbomify.com/CVE-2026-60575/): Missing authorization in Oracle Workflow (medium 6.3) - [CVE-2026-60574](https://insights.sbomify.com/CVE-2026-60574/): Missing authorization in Oracle Content Manager (medium 6.3) - [CVE-2026-60573](https://insights.sbomify.com/CVE-2026-60573/): Missing authorization in Oracle Partner Management (medium 6.3) - [CVE-2026-60572](https://insights.sbomify.com/CVE-2026-60572/): Missing authorization in Oracle E-Business Suite Integrated SOA Gateway (medium 6.3) - [CVE-2026-60571](https://insights.sbomify.com/CVE-2026-60571/): Missing authorization in Oracle SDP Number Portability (medium 5.4) - [CVE-2026-60570](https://insights.sbomify.com/CVE-2026-60570/): Other in Oracle GoldenGate (high 7.8) - [CVE-2026-6057](https://insights.sbomify.com/CVE-2026-6057/): Unauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code Execution (critical 9.8) - [CVE-2026-60569](https://insights.sbomify.com/CVE-2026-60569/): Missing authorization in MySQL Cluster (medium 5.1) - [CVE-2026-60568](https://insights.sbomify.com/CVE-2026-60568/): Auth bypass in Oracle WebCenter Portal (critical 9.9) - [CVE-2026-60567](https://insights.sbomify.com/CVE-2026-60567/): Privilege escalation in Oracle Identity Manager (critical 9.1) - [CVE-2026-60566](https://insights.sbomify.com/CVE-2026-60566/): Privilege escalation in Oracle WebCenter Portal (critical 9.8) - [CVE-2026-60565](https://insights.sbomify.com/CVE-2026-60565/): Missing authorization in Oracle WebCenter Portal (critical 9.9) - [CVE-2026-60564](https://insights.sbomify.com/CVE-2026-60564/): Missing authorization in Oracle WebCenter Portal (critical 9.6) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/503/