# Vulnerabilities published in 2026


- [CVE-2026-60347](https://insights.sbomify.com/CVE-2026-60347/): Missing authorization in JD Edwards EnterpriseOne Tools (low 3.6)
- [CVE-2026-60346](https://insights.sbomify.com/CVE-2026-60346/): Denial of service in JD Edwards EnterpriseOne Tools (low 3.7)
- [CVE-2026-60345](https://insights.sbomify.com/CVE-2026-60345/): Missing authorization in Oracle JDeveloper (high 7.2)
- [CVE-2026-60344](https://insights.sbomify.com/CVE-2026-60344/): Missing authorization in Oracle HRMS (France) (medium 5.4)
- [CVE-2026-60343](https://insights.sbomify.com/CVE-2026-60343/): Missing authorization in Oracle WebLogic Server (high 8.8)
- [CVE-2026-60342](https://insights.sbomify.com/CVE-2026-60342/): Privilege escalation in Oracle Access Manager (medium 5.3)
- [CVE-2026-60340](https://insights.sbomify.com/CVE-2026-60340/): Privilege escalation in Oracle Project Costing (high 7.2)
- [CVE-2026-6034](https://insights.sbomify.com/CVE-2026-6034/): code-projects Vehicle Showroom Management System ProfitAndLossReport.php cross site scripting (medium 5.3)
- [CVE-2026-60339](https://insights.sbomify.com/CVE-2026-60339/): Information disclosure in Oracle Project Manufacturing (low 3.1)
- [CVE-2026-60338](https://insights.sbomify.com/CVE-2026-60338/): Missing authorization in Oracle Project Manufacturing (low 3.6)
- [CVE-2026-60337](https://insights.sbomify.com/CVE-2026-60337/): Missing authorization in Oracle Project Manufacturing (medium 4.7)
- [CVE-2026-60336](https://insights.sbomify.com/CVE-2026-60336/): Missing authorization in Oracle Project Manufacturing (medium 5.7)
- [CVE-2026-60335](https://insights.sbomify.com/CVE-2026-60335/): Missing authorization in Oracle WebCenter Content (high 7.2)
- [CVE-2026-60334](https://insights.sbomify.com/CVE-2026-60334/): Missing authorization in Oracle WebCenter Content (high 8.8)
- [CVE-2026-60333](https://insights.sbomify.com/CVE-2026-60333/): Auth bypass in Oracle Access Manager (critical 9.9)
- [CVE-2026-60332](https://insights.sbomify.com/CVE-2026-60332/): Other in MySQL Cluster (medium 6.4)
- [CVE-2026-60331](https://insights.sbomify.com/CVE-2026-60331/): Other in MySQL Cluster (medium 6.4)
- [CVE-2026-60330](https://insights.sbomify.com/CVE-2026-60330/): Missing authorization in Oracle Identity Manager (high 8.5)
- [CVE-2026-6033](https://insights.sbomify.com/CVE-2026-6033/): CodeAstro Online Classroom updatedetailsfromstudent.php sql injection (medium 5.3)
- [CVE-2026-60329](https://insights.sbomify.com/CVE-2026-60329/): Auth bypass in Oracle Identity Manager (critical 9.8)
- [CVE-2026-60328](https://insights.sbomify.com/CVE-2026-60328/): Auth bypass in Oracle Access Manager (critical 9.8)
- [CVE-2026-60327](https://insights.sbomify.com/CVE-2026-60327/): Auth bypass in Oracle Access Manager (high 8.6)
- [CVE-2026-60326](https://insights.sbomify.com/CVE-2026-60326/): Auth bypass in Oracle Access Manager (critical 9.1)
- [CVE-2026-60325](https://insights.sbomify.com/CVE-2026-60325/): Missing authorization in Oracle Access Manager (high 8.0)
- [CVE-2026-60324](https://insights.sbomify.com/CVE-2026-60324/): Denial of service in MySQL Cluster (medium 6.5)
- [CVE-2026-60323](https://insights.sbomify.com/CVE-2026-60323/): Missing authorization in Oracle Identity Manager (high 8.1)
- [CVE-2026-60322](https://insights.sbomify.com/CVE-2026-60322/): Missing authorization in Oracle Applications Manager (medium 6.5)
- [CVE-2026-60321](https://insights.sbomify.com/CVE-2026-60321/): Missing authorization in Oracle Project Manufacturing (medium 5.7)
- [CVE-2026-60320](https://insights.sbomify.com/CVE-2026-60320/): Missing authorization in Oracle Data Integrator (high 7.5)
- [CVE-2026-6032](https://insights.sbomify.com/CVE-2026-6032/): code-projects Simple Laundry System checkcheckout.php cross site scripting (medium 5.3)
- [CVE-2026-60319](https://insights.sbomify.com/CVE-2026-60319/): Missing authorization in Oracle Data Integrator (medium 6.5)
- [CVE-2026-60318](https://insights.sbomify.com/CVE-2026-60318/): Information disclosure in Oracle Data Integrator (low 3.3)
- [CVE-2026-60317](https://insights.sbomify.com/CVE-2026-60317/): Other in MySQL Connectors (high 7.4)
- [CVE-2026-60316](https://insights.sbomify.com/CVE-2026-60316/): Other in MySQL Cluster (high 7.2)
- [CVE-2026-60315](https://insights.sbomify.com/CVE-2026-60315/): Information disclosure in MySQL Cluster (high 8.2)
- [CVE-2026-60314](https://insights.sbomify.com/CVE-2026-60314/): Denial of service in MySQL Router (high 7.5)
- [CVE-2026-60313](https://insights.sbomify.com/CVE-2026-60313/): Missing authorization in Oracle WebLogic Server (high 8.8)
- [CVE-2026-60312](https://insights.sbomify.com/CVE-2026-60312/): Auth bypass in Oracle WebLogic Server (high 8.1)
- [CVE-2026-60311](https://insights.sbomify.com/CVE-2026-60311/): Denial of service in MySQL Cluster (medium 6.5)
- [CVE-2026-60310](https://insights.sbomify.com/CVE-2026-60310/): Missing authorization in Oracle Performance Management (medium 5.4)
- [CVE-2026-6031](https://insights.sbomify.com/CVE-2026-6031/): code-projects Simple IT Discussion Forum add-category-function.php sql injection (medium 6.9)
- [CVE-2026-60309](https://insights.sbomify.com/CVE-2026-60309/): Missing authorization in Oracle Coherence (high 8.8)
- [CVE-2026-60308](https://insights.sbomify.com/CVE-2026-60308/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60307](https://insights.sbomify.com/CVE-2026-60307/): Information disclosure in Oracle Coherence (medium 4.3)
- [CVE-2026-60306](https://insights.sbomify.com/CVE-2026-60306/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60305](https://insights.sbomify.com/CVE-2026-60305/): Missing authorization in Oracle Coherence (high 7.1)
- [CVE-2026-60304](https://insights.sbomify.com/CVE-2026-60304/): Denial of service in Oracle Coherence (medium 6.5)
- [CVE-2026-60303](https://insights.sbomify.com/CVE-2026-60303/): Denial of service in Oracle Coherence (medium 4.3)
- [CVE-2026-60302](https://insights.sbomify.com/CVE-2026-60302/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60301](https://insights.sbomify.com/CVE-2026-60301/): Denial of service in Oracle Coherence (high 7.5)
- [CVE-2026-60300](https://insights.sbomify.com/CVE-2026-60300/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-6030](https://insights.sbomify.com/CVE-2026-6030/): itsourcecode Construction Management System del1.php sql injection (medium 5.3)
- [CVE-2026-60299](https://insights.sbomify.com/CVE-2026-60299/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-60298](https://insights.sbomify.com/CVE-2026-60298/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-60297](https://insights.sbomify.com/CVE-2026-60297/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-60296](https://insights.sbomify.com/CVE-2026-60296/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-60295](https://insights.sbomify.com/CVE-2026-60295/): Missing authorization in Oracle Coherence (high 8.5)
- [CVE-2026-60294](https://insights.sbomify.com/CVE-2026-60294/): Auth bypass in Oracle WebLogic Server (critical 9.8)
- [CVE-2026-60293](https://insights.sbomify.com/CVE-2026-60293/): Information disclosure in Oracle WebLogic Server (high 8.6)
- [CVE-2026-60292](https://insights.sbomify.com/CVE-2026-60292/): Auth bypass in Oracle WebLogic Server (critical 9.8)
- [CVE-2026-60291](https://insights.sbomify.com/CVE-2026-60291/): Auth bypass in Oracle WebLogic Server (critical 9.8)
- [CVE-2026-60290](https://insights.sbomify.com/CVE-2026-60290/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-6029](https://insights.sbomify.com/CVE-2026-6029/): Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection (critical 9.3)
- [CVE-2026-60289](https://insights.sbomify.com/CVE-2026-60289/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60288](https://insights.sbomify.com/CVE-2026-60288/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-60287](https://insights.sbomify.com/CVE-2026-60287/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-60286](https://insights.sbomify.com/CVE-2026-60286/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60285](https://insights.sbomify.com/CVE-2026-60285/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60284](https://insights.sbomify.com/CVE-2026-60284/): Missing authorization in Oracle Coherence (high 8.2)
- [CVE-2026-60283](https://insights.sbomify.com/CVE-2026-60283/): Information disclosure in Oracle Coherence (medium 5.3)
- [CVE-2026-60282](https://insights.sbomify.com/CVE-2026-60282/): Missing authorization in Oracle Coherence (medium 5.4)
- [CVE-2026-60281](https://insights.sbomify.com/CVE-2026-60281/): Missing authorization in Oracle Coherence (high 8.1)
- [CVE-2026-60280](https://insights.sbomify.com/CVE-2026-60280/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-6028](https://insights.sbomify.com/CVE-2026-6028/): Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection (critical 9.3)
- [CVE-2026-60279](https://insights.sbomify.com/CVE-2026-60279/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60278](https://insights.sbomify.com/CVE-2026-60278/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60277](https://insights.sbomify.com/CVE-2026-60277/): Auth bypass in Oracle Coherence (high 8.1)
- [CVE-2026-60276](https://insights.sbomify.com/CVE-2026-60276/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60275](https://insights.sbomify.com/CVE-2026-60275/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60274](https://insights.sbomify.com/CVE-2026-60274/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60273](https://insights.sbomify.com/CVE-2026-60273/): Auth bypass in Oracle Coherence (high 8.1)
- [CVE-2026-60272](https://insights.sbomify.com/CVE-2026-60272/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60271](https://insights.sbomify.com/CVE-2026-60271/): Privilege escalation in Oracle Coherence (high 7.8)
- [CVE-2026-60270](https://insights.sbomify.com/CVE-2026-60270/): Missing authorization in Oracle Coherence (medium 5.5)
- [CVE-2026-6027](https://insights.sbomify.com/CVE-2026-6027/): Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection (critical 9.3)
- [CVE-2026-60269](https://insights.sbomify.com/CVE-2026-60269/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60268](https://insights.sbomify.com/CVE-2026-60268/): Missing authorization in Oracle Coherence (high 8.8)
- [CVE-2026-60267](https://insights.sbomify.com/CVE-2026-60267/): Missing authorization in Oracle Coherence (critical 9.1)
- [CVE-2026-60266](https://insights.sbomify.com/CVE-2026-60266/): Information disclosure in Oracle Coherence (medium 5.9)
- [CVE-2026-60265](https://insights.sbomify.com/CVE-2026-60265/): Missing authorization in Oracle Coherence (medium 6.0)
- [CVE-2026-60264](https://insights.sbomify.com/CVE-2026-60264/): Information disclosure in Oracle Coherence (critical 9.8)
- [CVE-2026-60263](https://insights.sbomify.com/CVE-2026-60263/): Missing authorization in Oracle Coherence (high 7.5)
- [CVE-2026-60262](https://insights.sbomify.com/CVE-2026-60262/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-60261](https://insights.sbomify.com/CVE-2026-60261/): Missing authorization in Oracle Coherence (high 8.8)
- [CVE-2026-60260](https://insights.sbomify.com/CVE-2026-60260/): Information disclosure in Oracle Coherence (medium 5.3)
- [CVE-2026-6026](https://insights.sbomify.com/CVE-2026-6026/): Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection (critical 9.3)
- [CVE-2026-60259](https://insights.sbomify.com/CVE-2026-60259/): Missing authorization in Oracle Coherence (critical 9.8)
- [CVE-2026-60258](https://insights.sbomify.com/CVE-2026-60258/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-60257](https://insights.sbomify.com/CVE-2026-60257/): Auth bypass in Oracle Coherence (critical 9.8)
- [CVE-2026-60256](https://insights.sbomify.com/CVE-2026-60256/): Missing authorization in Oracle Coherence (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/506/