Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 606 of 1013.
- CVE-2026-47074 ex_aws_sns SigningCertURL not validated in verify_message/1
- CVE-2026-47073 Unbounded memory consumption in WebSocket client in hackney
- CVE-2026-47072 CRLF injection in WebSocket upgrade request in hackney
- CVE-2026-47071 SOCKS5 TLS upgrade ignores caller timeout in hackney
- CVE-2026-47070 HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney
- CVE-2026-4707 Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-47069 CRLF injection in cookie domain/path options in hackney
- CVE-2026-47068 Cross-session PubSub topic injection via URL parameter in phoenix_storybook
- CVE-2026-47067 Atom table exhaustion via unrecognized URL schemes in hackney
- CVE-2026-47066 Infinite loop in Alt-Svc header parser in hackney
- CVE-2026-47065 Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232
- CVE-2026-47064 Denial of service in MySQL Cluster
- CVE-2026-47063 Other in Oracle GraalVM Enterprise Edition
- CVE-2026-47062 Denial of service in Oracle VM VirtualBox
- CVE-2026-47061 Missing authorization in Oracle Database Server
- CVE-2026-47060 Other in Oracle Database Server
- CVE-2026-4706 Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-47059 Denial of service in Oracle GraalVM Enterprise Edition
- CVE-2026-47058 Deserialization in Oracle Java SE
- CVE-2026-47057 Denial of service in Oracle Java SE
- CVE-2026-47056 Missing authorization in Oracle Data Integrator
- CVE-2026-47055 Other in Oracle VM VirtualBox
- CVE-2026-47054 Privilege escalation in Oracle VM VirtualBox
- CVE-2026-47053 Missing authorization in Oracle VM VirtualBox
- CVE-2026-47052 Denial of service in MySQL Cluster
- CVE-2026-47051 Open redirect in PeopleSoft Enterprise PeopleTools
- CVE-2026-47050 Other in Oracle VM VirtualBox
- CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component
- CVE-2026-47049 Missing authorization in PeopleSoft Enterprise PeopleTools
- CVE-2026-47048 Open redirect in PeopleSoft Enterprise PeopleTools
- CVE-2026-47047 Privilege escalation in Oracle VM VirtualBox
- CVE-2026-47046 Denial of service in Oracle Database Server
- CVE-2026-47045 Open redirect in Oracle Database Server
- CVE-2026-47044 Denial of service in Oracle VM VirtualBox
- CVE-2026-47043 Information disclosure in Oracle VM VirtualBox
- CVE-2026-47041 Denial of service in Oracle VM VirtualBox
- CVE-2026-47040 Missing authorization in Oracle Net Services
- CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component
- CVE-2026-47039 Missing authorization in Oracle Database Server
- CVE-2026-47038 Missing authorization in Oracle Database Server
- CVE-2026-47037 Auth bypass in Oracle Access Manager
- CVE-2026-47036 Missing authorization in Siebel CRM Development
- CVE-2026-47035 Security feature bypass in Oracle Java SE
- CVE-2026-47034 Security feature bypass in Oracle Java SE
- CVE-2026-47033 Missing authorization in Oracle Contracts Integration
- CVE-2026-47032 Other in Siebel CRM End User
- CVE-2026-47031 Missing authorization in Oracle Bills of Material
- CVE-2026-47030 Other in Oracle Java SE
- CVE-2026-4703 WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission
- CVE-2026-47028 Missing authorization in Oracle Document Management and Collaboration
- CVE-2026-47027 Denial of service in Oracle Java SE
- CVE-2026-47026 Open redirect in PeopleSoft Enterprise PeopleTools
- CVE-2026-47025 Information disclosure in Oracle Solaris
- CVE-2026-47024 Missing authorization in PeopleSoft Enterprise PeopleTools
- CVE-2026-47023 Denial of service in MySQL Cluster
- CVE-2026-47022 Denial of service in GoldenGate Stream Analytics
- CVE-2026-47021 Denial of service in Oracle GraalVM Enterprise Edition
- CVE-2026-4702 JIT miscompilation in the JavaScript Engine component
- CVE-2026-47019 Missing authorization in Oracle Product Hub
- CVE-2026-47018 Denial of service in Siebel CRM Cloud Applications
- CVE-2026-47017 Missing authorization in PeopleSoft Enterprise PeopleTools
- CVE-2026-47016 Information disclosure in Siebel CRM Integration
- CVE-2026-47015 Open redirect in PeopleSoft Enterprise PeopleTools
- CVE-2026-47014 Missing authorization in Oracle Product Workbench
- CVE-2026-47013 Denial of service in Oracle Java SE
- CVE-2026-47012 Denial of service in MySQL Cluster
- CVE-2026-47011 Information disclosure in Siebel CRM Deployment
- CVE-2026-47010 Other in Oracle GraalVM Enterprise Edition
- CVE-2026-4701 Use-after-free in the JavaScript Engine component
- CVE-2026-47009 Information disclosure in Oracle Agile PLM
- CVE-2026-47008 Denial of service in MySQL Cluster
- CVE-2026-47007 Missing authorization in Oracle Communications Pricing Design Center
- CVE-2026-47006 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-47005 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-47004 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-47003 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-47002 Open redirect in Oracle Enterprise Manager Base Platform
- CVE-2026-47001 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-47000 Cross-site request forgery in Oracle Enterprise Manager Base Platform
- CVE-2026-4700 Mitigation bypass in the Networking: HTTP component
- CVE-2026-46999 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46998 Open redirect in Oracle Enterprise Manager Base Platform
- CVE-2026-46997 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46996 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46995 Privilege escalation in Oracle Enterprise Manager Base Platform
- CVE-2026-46994 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46993 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46992 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46991 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46990 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-4699 Incorrect boundary conditions in the Layout: Text and Fonts component
- CVE-2026-46989 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46988 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46987 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46986 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46985 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46984 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46983 Missing authorization in Oracle Retail Integration Bus
- CVE-2026-46982 Missing authorization in Oracle Retail Integration Bus
- CVE-2026-46981 Missing authorization in Oracle Utilities Network Management System