# Vulnerabilities published in 2026


- [CVE-2026-60563](https://insights.sbomify.com/CVE-2026-60563/): Missing authorization in Oracle WebCenter Portal (high 8.8)
- [CVE-2026-60562](https://insights.sbomify.com/CVE-2026-60562/): Missing authorization in Oracle WebCenter Portal (critical 9.9)
- [CVE-2026-60561](https://insights.sbomify.com/CVE-2026-60561/): Missing authorization in Oracle WebCenter Portal (critical 9.9)
- [CVE-2026-60560](https://insights.sbomify.com/CVE-2026-60560/): Missing authorization in Oracle Identity Manager (high 8.1)
- [CVE-2026-60559](https://insights.sbomify.com/CVE-2026-60559/): Missing authorization in Oracle Access Manager (high 8.6)
- [CVE-2026-60558](https://insights.sbomify.com/CVE-2026-60558/): Auth bypass in Oracle WebCenter Sites (high 8.1)
- [CVE-2026-60557](https://insights.sbomify.com/CVE-2026-60557/): Missing authorization in Oracle WebCenter Sites (medium 6.5)
- [CVE-2026-60556](https://insights.sbomify.com/CVE-2026-60556/): Information disclosure in Oracle WebCenter Sites (high 8.6)
- [CVE-2026-60555](https://insights.sbomify.com/CVE-2026-60555/): Missing authorization in Oracle WebCenter Sites (critical 9.8)
- [CVE-2026-60554](https://insights.sbomify.com/CVE-2026-60554/): Information disclosure in Oracle WebCenter Sites (high 7.5)
- [CVE-2026-60553](https://insights.sbomify.com/CVE-2026-60553/): Missing authorization in Oracle WebCenter Sites (high 8.7)
- [CVE-2026-60552](https://insights.sbomify.com/CVE-2026-60552/): Missing authorization in Oracle WebCenter Sites (critical 9.9)
- [CVE-2026-60551](https://insights.sbomify.com/CVE-2026-60551/): Missing authorization in Oracle WebCenter Sites (critical 9.8)
- [CVE-2026-60550](https://insights.sbomify.com/CVE-2026-60550/): Information disclosure in Oracle WebCenter Sites (high 8.6)
- [CVE-2026-60549](https://insights.sbomify.com/CVE-2026-60549/): Missing authorization in Oracle Managed File Transfer (high 8.8)
- [CVE-2026-60548](https://insights.sbomify.com/CVE-2026-60548/): Information disclosure in Oracle SOA Suite (high 7.7)
- [CVE-2026-60547](https://insights.sbomify.com/CVE-2026-60547/): Missing authorization in Oracle Managed File Transfer (critical 9.9)
- [CVE-2026-60546](https://insights.sbomify.com/CVE-2026-60546/): Privilege escalation in Oracle SOA Suite (high 7.2)
- [CVE-2026-60545](https://insights.sbomify.com/CVE-2026-60545/): Missing authorization in Oracle Managed File Transfer (high 8.8)
- [CVE-2026-60544](https://insights.sbomify.com/CVE-2026-60544/): Missing authorization in Oracle SOA Suite (high 8.2)
- [CVE-2026-60543](https://insights.sbomify.com/CVE-2026-60543/): Auth bypass in Oracle SOA Suite (high 8.1)
- [CVE-2026-60542](https://insights.sbomify.com/CVE-2026-60542/): Missing authorization in Oracle Business Process Management Suite (critical 9.9)
- [CVE-2026-60541](https://insights.sbomify.com/CVE-2026-60541/): Missing authorization in Oracle SOA Suite (critical 9.8)
- [CVE-2026-60540](https://insights.sbomify.com/CVE-2026-60540/): Missing authorization in Oracle SOA Suite (critical 9.6)
- [CVE-2026-60539](https://insights.sbomify.com/CVE-2026-60539/): Missing authorization in Oracle SOA Suite (high 8.8)
- [CVE-2026-60538](https://insights.sbomify.com/CVE-2026-60538/): Missing authorization in Oracle SOA Suite (critical 9.8)
- [CVE-2026-60537](https://insights.sbomify.com/CVE-2026-60537/): Missing authorization in Oracle Managed File Transfer (critical 9.9)
- [CVE-2026-60536](https://insights.sbomify.com/CVE-2026-60536/): Missing authorization in Oracle Identity Manager Connector (high 8.6)
- [CVE-2026-60535](https://insights.sbomify.com/CVE-2026-60535/): Auth bypass in Oracle Identity Manager Connector (critical 9.8)
- [CVE-2026-60534](https://insights.sbomify.com/CVE-2026-60534/): Missing authorization in Oracle Identity Manager Connector (high 7.7)
- [CVE-2026-60533](https://insights.sbomify.com/CVE-2026-60533/): Missing authorization in Oracle Identity Manager Connector (high 8.0)
- [CVE-2026-60532](https://insights.sbomify.com/CVE-2026-60532/): Privilege escalation in Oracle Identity Manager Connector (critical 9.8)
- [CVE-2026-60531](https://insights.sbomify.com/CVE-2026-60531/): Missing authorization in Oracle Identity Manager Connector (critical 9.9)
- [CVE-2026-60530](https://insights.sbomify.com/CVE-2026-60530/): Privilege escalation in Oracle HTTP Server (high 7.8)
- [CVE-2026-6053](https://insights.sbomify.com/CVE-2026-6053/): IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables (medium 5.5)
- [CVE-2026-60529](https://insights.sbomify.com/CVE-2026-60529/): Missing authorization in Oracle WebLogic Server (high 7.2)
- [CVE-2026-60528](https://insights.sbomify.com/CVE-2026-60528/): Missing authorization in Oracle WebLogic Server (high 7.6)
- [CVE-2026-60527](https://insights.sbomify.com/CVE-2026-60527/): Missing authorization in Oracle WebLogic Server (high 7.1)
- [CVE-2026-60526](https://insights.sbomify.com/CVE-2026-60526/): Other in Oracle Java SE (medium 6.7)
- [CVE-2026-60525](https://insights.sbomify.com/CVE-2026-60525/): Missing authorization in Oracle WebCenter Content (high 8.2)
- [CVE-2026-60524](https://insights.sbomify.com/CVE-2026-60524/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.9)
- [CVE-2026-60523](https://insights.sbomify.com/CVE-2026-60523/): Missing authorization in Oracle WebCenter Content (high 8.7)
- [CVE-2026-60522](https://insights.sbomify.com/CVE-2026-60522/): Missing authorization in Oracle WebCenter Content (high 7.6)
- [CVE-2026-60521](https://insights.sbomify.com/CVE-2026-60521/): Missing authorization in Oracle Advanced Pricing (medium 6.5)
- [CVE-2026-60520](https://insights.sbomify.com/CVE-2026-60520/): Missing authorization in Oracle Unified Directory (high 8.1)
- [CVE-2026-6052](https://insights.sbomify.com/CVE-2026-6052/): IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables (medium 6.5)
- [CVE-2026-60519](https://insights.sbomify.com/CVE-2026-60519/): Missing authorization in Oracle Unified Directory (high 7.2)
- [CVE-2026-6051](https://insights.sbomify.com/CVE-2026-6051/): IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap (medium 5.5)
- [CVE-2026-60503](https://insights.sbomify.com/CVE-2026-60503/): Missing authorization in WebCenter Content: Imaging (high 8.8)
- [CVE-2026-60502](https://insights.sbomify.com/CVE-2026-60502/): Missing authorization in WebCenter Content: Imaging (high 7.2)
- [CVE-2026-60501](https://insights.sbomify.com/CVE-2026-60501/): Missing authorization in Service Delivery Platform (medium 5.2)
- [CVE-2026-60500](https://insights.sbomify.com/CVE-2026-60500/): Information disclosure in PeopleSoft Enterprise PeopleTools (medium 5.8)
- [CVE-2026-60499](https://insights.sbomify.com/CVE-2026-60499/): Missing authorization in JD Edwards EnterpriseOne Solution Advisor (high 8.8)
- [CVE-2026-60498](https://insights.sbomify.com/CVE-2026-60498/): Missing authorization in JD Edwards EnterpriseOne Human Resources Management (high 7.5)
- [CVE-2026-60497](https://insights.sbomify.com/CVE-2026-60497/): Missing authorization in JD Edwards EnterpriseOne CRM Foundation (high 7.5)
- [CVE-2026-60496](https://insights.sbomify.com/CVE-2026-60496/): Missing authorization in JD Edwards EnterpriseOne Advanced Pricing - Procurement (high 7.5)
- [CVE-2026-60495](https://insights.sbomify.com/CVE-2026-60495/): Missing authorization in JD Edwards EnterpriseOne Requirements Planning (high 7.5)
- [CVE-2026-60494](https://insights.sbomify.com/CVE-2026-60494/): Missing authorization in JD Edwards EnterpriseOne General Ledger (high 7.0)
- [CVE-2026-60493](https://insights.sbomify.com/CVE-2026-60493/): Missing authorization in JD Edwards EnterpriseOne Human Resources Management (high 8.8)
- [CVE-2026-60492](https://insights.sbomify.com/CVE-2026-60492/): Privilege escalation in JD Edwards EnterpriseOne HCM Foundation (high 7.1)
- [CVE-2026-60491](https://insights.sbomify.com/CVE-2026-60491/): Missing authorization in Oracle Advanced Inbound Telephony (medium 6.3)
- [CVE-2026-60490](https://insights.sbomify.com/CVE-2026-60490/): Missing authorization in JD Edwards EnterpriseOne CRM Foundation (high 8.8)
- [CVE-2026-60489](https://insights.sbomify.com/CVE-2026-60489/): Missing authorization in JD Edwards EnterpriseOne CRM Foundation (high 8.8)
- [CVE-2026-6048](https://insights.sbomify.com/CVE-2026-6048/): Flipbox Addon for Elementor <= 2.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Attributes (medium 6.4)
- [CVE-2026-60472](https://insights.sbomify.com/CVE-2026-60472/): Missing authorization in WebCenter Content: Imaging (high 8.8)
- [CVE-2026-60471](https://insights.sbomify.com/CVE-2026-60471/): Missing authorization in WebCenter Content: Imaging (high 8.3)
- [CVE-2026-60470](https://insights.sbomify.com/CVE-2026-60470/): Missing authorization in WebCenter Content: Imaging (high 8.7)
- [CVE-2026-6047](https://insights.sbomify.com/CVE-2026-6047/): Heap buffer overflow in OOXML text box element import (medium 5.4)
- [CVE-2026-60469](https://insights.sbomify.com/CVE-2026-60469/): Missing authorization in WebCenter Content: Imaging (high 8.7)
- [CVE-2026-60468](https://insights.sbomify.com/CVE-2026-60468/): Missing authorization in WebCenter Content: Imaging (high 7.1)
- [CVE-2026-60467](https://insights.sbomify.com/CVE-2026-60467/): Open redirect in WebCenter Content: Imaging (high 7.5)
- [CVE-2026-60466](https://insights.sbomify.com/CVE-2026-60466/): Missing authorization in WebCenter Content: Imaging (high 7.2)
- [CVE-2026-60465](https://insights.sbomify.com/CVE-2026-60465/): Missing authorization in WebCenter Content: Imaging (high 8.8)
- [CVE-2026-60464](https://insights.sbomify.com/CVE-2026-60464/): Auth bypass in WebCenter Content: Imaging (high 8.8)
- [CVE-2026-60463](https://insights.sbomify.com/CVE-2026-60463/): Missing authorization in WebCenter Content: Imaging (critical 9.8)
- [CVE-2026-60462](https://insights.sbomify.com/CVE-2026-60462/): Auth bypass in Oracle WebCenter Content (high 8.1)
- [CVE-2026-60461](https://insights.sbomify.com/CVE-2026-60461/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.9)
- [CVE-2026-60460](https://insights.sbomify.com/CVE-2026-60460/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.8)
- [CVE-2026-6046](https://insights.sbomify.com/CVE-2026-6046/): Plugin bot username conflict allows user account to be used as bot identity in Mattermost Server (medium 5.3)
- [CVE-2026-60459](https://insights.sbomify.com/CVE-2026-60459/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.9)
- [CVE-2026-60458](https://insights.sbomify.com/CVE-2026-60458/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.9)
- [CVE-2026-60457](https://insights.sbomify.com/CVE-2026-60457/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.9)
- [CVE-2026-60456](https://insights.sbomify.com/CVE-2026-60456/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.9)
- [CVE-2026-60455](https://insights.sbomify.com/CVE-2026-60455/): Privilege escalation in Oracle Platform Security for Java (high 8.8)
- [CVE-2026-60454](https://insights.sbomify.com/CVE-2026-60454/): Privilege escalation in Oracle HTTP Server (high 7.8)
- [CVE-2026-60453](https://insights.sbomify.com/CVE-2026-60453/): Information disclosure in Oracle Solaris (medium 5.3)
- [CVE-2026-60452](https://insights.sbomify.com/CVE-2026-60452/): Missing authorization in WebCenter Content: Imaging (high 8.5)
- [CVE-2026-60451](https://insights.sbomify.com/CVE-2026-60451/): Missing authorization in WebCenter Content: Imaging (high 7.1)
- [CVE-2026-60450](https://insights.sbomify.com/CVE-2026-60450/): Auth bypass in Oracle WebCenter Content (high 8.1)
- [CVE-2026-6045](https://insights.sbomify.com/CVE-2026-6045/): Heap buffer overflow in EMF+ gradient brush import (medium 5.4)
- [CVE-2026-60449](https://insights.sbomify.com/CVE-2026-60449/): Information disclosure in Oracle WebCenter Content (high 7.1)
- [CVE-2026-60448](https://insights.sbomify.com/CVE-2026-60448/): Missing authorization in Oracle WebCenter Content (high 8.7)
- [CVE-2026-60447](https://insights.sbomify.com/CVE-2026-60447/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.9)
- [CVE-2026-60446](https://insights.sbomify.com/CVE-2026-60446/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.8)
- [CVE-2026-60445](https://insights.sbomify.com/CVE-2026-60445/): Missing authorization in Oracle WebCenter Enterprise Capture (critical 9.9)
- [CVE-2026-60444](https://insights.sbomify.com/CVE-2026-60444/): Missing authorization in Oracle WebCenter Content (high 8.5)
- [CVE-2026-60443](https://insights.sbomify.com/CVE-2026-60443/): Missing authorization in Oracle WebCenter Content (high 8.7)
- [CVE-2026-60442](https://insights.sbomify.com/CVE-2026-60442/): Missing authorization in Service Delivery Platform (critical 9.8)
- [CVE-2026-60441](https://insights.sbomify.com/CVE-2026-60441/): Missing authorization in Service Delivery Platform (critical 9.8)
- [CVE-2026-60440](https://insights.sbomify.com/CVE-2026-60440/): Information disclosure in Service Delivery Platform (high 7.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/504/