Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 505 of 1013.
- CVE-2026-60439 Deserialization in Oracle Platform Security for Java
- CVE-2026-60438 Missing authorization in Oracle HTTP Server
- CVE-2026-60437 Missing authorization in Oracle Unified Directory
- CVE-2026-60436 Denial of service in Oracle Unified Directory
- CVE-2026-60435 Auth bypass in Oracle WebCenter Content
- CVE-2026-60434 Auth bypass in Oracle Transportation Management
- CVE-2026-60433 Missing authorization in Oracle Transportation Management
- CVE-2026-60432 Auth bypass in Oracle Solaris
- CVE-2026-60431 Information disclosure in Oracle HTTP Server
- CVE-2026-60430 Missing authorization in Oracle Unified Directory
- CVE-2026-6043 Insecure Default Configuration in P4 Server
- CVE-2026-60429 Missing authorization in Oracle Unified Directory
- CVE-2026-60428 Missing authorization in Oracle Unified Directory
- CVE-2026-60427 Missing authorization in Oracle Unified Directory
- CVE-2026-60426 Missing authorization in Oracle Unified Directory
- CVE-2026-60425 Denial of service in Oracle Unified Directory
- CVE-2026-60424 Auth bypass in Oracle Unified Directory
- CVE-2026-60423 Auth bypass in Oracle Unified Directory
- CVE-2026-60422 Missing authorization in Oracle Unified Directory
- CVE-2026-60421 Missing authorization in Oracle Unified Directory
- CVE-2026-60420 Missing authorization in Oracle Unified Directory
- CVE-2026-6042 musl libc GB18030 4-byte Decoder iconv.c iconv algorithmic complexity
- CVE-2026-60419 Privilege escalation in Oracle Unified Directory
- CVE-2026-60418 Privilege escalation in Oracle Unified Directory
- CVE-2026-60417 Auth bypass in Oracle Unified Directory
- CVE-2026-60416 Auth bypass in Oracle Access Manager
- CVE-2026-60415 Information disclosure in Oracle WebLogic Server
- CVE-2026-60414 Information disclosure in Oracle Outside In Technology
- CVE-2026-60413 Information disclosure in Oracle Outside In Technology
- CVE-2026-60412 Deserialization in Oracle Outside In Technology
- CVE-2026-60411 Denial of service in TimesTen In-Memory Database
- CVE-2026-60410 Denial of service in TimesTen In-Memory Database
- CVE-2026-6041 Buzz Comments <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Buzz Avatar' Setting
- CVE-2026-60409 Missing authorization in TimesTen In-Memory Database
- CVE-2026-60408 Information disclosure in TimesTen In-Memory Database
- CVE-2026-60407 Missing authorization in TimesTen In-Memory Database
- CVE-2026-60406 Privilege escalation in TimesTen In-Memory Database
- CVE-2026-60405 Information disclosure in TimesTen In-Memory Database
- CVE-2026-60404 Denial of service in TimesTen In-Memory Database
- CVE-2026-60403 Denial of service in TimesTen In-Memory Database
- CVE-2026-60402 Missing authorization in TimesTen In-Memory Database
- CVE-2026-60401 Missing authorization in TimesTen In-Memory Database
- CVE-2026-60400 Missing authorization in Oracle GoldenGate
- CVE-2026-6040 Heap use-after-free in ODF number-format blank-width parsing
- CVE-2026-60399 Denial of service in Oracle GoldenGate
- CVE-2026-60398 Missing authorization in Oracle GoldenGate
- CVE-2026-60397 Denial of service in Oracle GoldenGate
- CVE-2026-60396 Missing authorization in Oracle GoldenGate
- CVE-2026-60395 Information disclosure in Oracle GoldenGate
- CVE-2026-60394 Information disclosure in Oracle GoldenGate
- CVE-2026-60393 Information disclosure in Oracle Hyperion Infrastructure Technology
- CVE-2026-60392 Deserialization in Oracle Outside In Technology
- CVE-2026-60391 Missing authorization in Oracle Hyperion Financial Reporting
- CVE-2026-6039 Heap buffer overflow in DXF polyline import
- CVE-2026-60389 Missing authorization in Service Delivery Platform
- CVE-2026-60388 Missing authorization in Service Delivery Platform
- CVE-2026-60387 Auth bypass in Service Delivery Platform
- CVE-2026-60386 Missing authorization in Service Delivery Platform
- CVE-2026-60385 Auth bypass in Service Delivery Platform
- CVE-2026-60384 Missing authorization in Service Delivery Platform
- CVE-2026-60383 Missing authorization in Service Delivery Platform
- CVE-2026-60382 Denial of service in Service Delivery Platform
- CVE-2026-60381 Missing authorization in Service Delivery Platform
- CVE-2026-60380 Auth bypass in Service Delivery Platform
- CVE-2026-6038 code-projects Vehicle Showroom Management System RegisterCustomerFunction.php sql injection
- CVE-2026-60379 Missing authorization in Service Delivery Platform
- CVE-2026-60378 Auth bypass in Service Delivery Platform
- CVE-2026-60377 Missing authorization in Service Delivery Platform
- CVE-2026-60376 Missing authorization in Service Delivery Platform
- CVE-2026-60375 Missing authorization in Service Delivery Platform
- CVE-2026-60374 Auth bypass in Service Delivery Platform
- CVE-2026-60373 Deserialization in Oracle Platform Security for Java
- CVE-2026-60372 Deserialization in Oracle Platform Security for Java
- CVE-2026-60371 Privilege escalation in Oracle Platform Security for Java
- CVE-2026-60370 Other in Oracle Platform Security for Java
- CVE-2026-6037 code-projects Vehicle Showroom Management System AddVehicleFunction.php sql injection
- CVE-2026-60369 Deserialization in Oracle Platform Security for Java
- CVE-2026-60368 Other in Oracle Platform Security for Java
- CVE-2026-60367 Auth bypass in Oracle Platform Security for Java
- CVE-2026-60366 Deserialization in Oracle Platform Security for Java
- CVE-2026-60365 Missing authorization in Oracle HTTP Server
- CVE-2026-60364 Missing authorization in Oracle HTTP Server
- CVE-2026-60363 Missing authorization in Oracle HTTP Server
- CVE-2026-60362 Auth bypass in Oracle Unified Directory
- CVE-2026-60361 Missing authorization in Oracle Unified Directory
- CVE-2026-60360 Auth bypass in Oracle Unified Directory
- CVE-2026-6036 code-projects Vehicle Showroom Management System VehicleDetailsFunction.php sql injection
- CVE-2026-60359 Missing authorization in Oracle Unified Directory
- CVE-2026-60358 Missing authorization in Oracle Access Manager
- CVE-2026-60357 Auth bypass in Siebel CRM Integration
- CVE-2026-60356 Auth bypass in Oracle Access Manager
- CVE-2026-60355 Auth bypass in Oracle Access Manager
- CVE-2026-60354 Information disclosure in Oracle JDeveloper
- CVE-2026-60353 Missing authorization in Oracle JDeveloper
- CVE-2026-60352 Information disclosure in Oracle JDeveloper
- CVE-2026-60351 Missing authorization in Oracle JDeveloper
- CVE-2026-60350 Information disclosure in Oracle JDeveloper
- CVE-2026-6035 code-projects Vehicle Showroom Management System ServiceAndSalesReport.php cross site scripting
- CVE-2026-60349 Information disclosure in Oracle JDeveloper
- CVE-2026-60348 Missing authorization in Oracle JDeveloper