# Vulnerabilities published in 2026


- [CVE-2026-46980](https://insights.sbomify.com/CVE-2026-46980/): Missing authorization in Oracle Utilities Network Management System (medium 4.3)
- [CVE-2026-4698](https://insights.sbomify.com/CVE-2026-4698/): JIT miscompilation in the JavaScript Engine: JIT component (high 8.8)
- [CVE-2026-46979](https://insights.sbomify.com/CVE-2026-46979/): Missing authorization in PeopleSoft Enterprise CS Campus Community (medium 6.5)
- [CVE-2026-46978](https://insights.sbomify.com/CVE-2026-46978/): Missing authorization in Oracle Solaris (critical 10.0)
- [CVE-2026-46977](https://insights.sbomify.com/CVE-2026-46977/): Information disclosure in Oracle VM VirtualBox (low 3.2)
- [CVE-2026-46976](https://insights.sbomify.com/CVE-2026-46976/): Missing authorization in Oracle Public Sector Payroll (high 7.2)
- [CVE-2026-46975](https://insights.sbomify.com/CVE-2026-46975/): Missing authorization in Oracle Database Server (medium 5.8)
- [CVE-2026-46974](https://insights.sbomify.com/CVE-2026-46974/): Other in Oracle VM VirtualBox (high 7.5)
- [CVE-2026-46973](https://insights.sbomify.com/CVE-2026-46973/): Auth bypass in Oracle Outsourced Mfg for Discrete Industries (high 8.8)
- [CVE-2026-46972](https://insights.sbomify.com/CVE-2026-46972/): Auth bypass in Oracle Outsourced Mfg for Discrete Industries (high 8.8)
- [CVE-2026-46971](https://insights.sbomify.com/CVE-2026-46971/): Privilege escalation in Oracle HR Intelligence (high 7.5)
- [CVE-2026-46970](https://insights.sbomify.com/CVE-2026-46970/): Privilege escalation in Oracle HR Intelligence (high 7.2)
- [CVE-2026-4697](https://insights.sbomify.com/CVE-2026-4697/): Incorrect boundary conditions in the Audio/Video: Web Codecs component (high 7.5)
- [CVE-2026-46969](https://insights.sbomify.com/CVE-2026-46969/): Missing authorization in Oracle Financials for EMEA (high 7.2)
- [CVE-2026-46968](https://insights.sbomify.com/CVE-2026-46968/): Other in Oracle Java SE (medium 5.9)
- [CVE-2026-46967](https://insights.sbomify.com/CVE-2026-46967/): Missing authorization in Oracle Public Sector Financials (International) (high 8.8)
- [CVE-2026-46966](https://insights.sbomify.com/CVE-2026-46966/): Missing authorization in Oracle Universal Work Queue (high 7.5)
- [CVE-2026-46965](https://insights.sbomify.com/CVE-2026-46965/): Missing authorization in Oracle Universal Work Queue (high 8.8)
- [CVE-2026-46964](https://insights.sbomify.com/CVE-2026-46964/): Missing authorization in Oracle Universal Work Queue (critical 9.9)
- [CVE-2026-46963](https://insights.sbomify.com/CVE-2026-46963/): Missing authorization in Oracle Universal Work Queue (critical 9.9)
- [CVE-2026-46962](https://insights.sbomify.com/CVE-2026-46962/): Auth bypass in Oracle Project Portfolio Analysis (high 8.8)
- [CVE-2026-46961](https://insights.sbomify.com/CVE-2026-46961/): Auth bypass in Oracle Project Portfolio Analysis (high 8.8)
- [CVE-2026-46960](https://insights.sbomify.com/CVE-2026-46960/): Missing authorization in Oracle Project Portfolio Analysis (high 7.2)
- [CVE-2026-4696](https://insights.sbomify.com/CVE-2026-4696/): Use-after-free in the Layout: Text and Fonts component (critical 9.8)
- [CVE-2026-46959](https://insights.sbomify.com/CVE-2026-46959/): Missing authorization in Oracle Subledger Accounting (high 7.5)
- [CVE-2026-46958](https://insights.sbomify.com/CVE-2026-46958/): Missing authorization in Oracle Subledger Accounting (high 7.5)
- [CVE-2026-46957](https://insights.sbomify.com/CVE-2026-46957/): Missing authorization in Oracle iSupplier Portal (high 7.5)
- [CVE-2026-46956](https://insights.sbomify.com/CVE-2026-46956/): Missing authorization in Oracle Property Manager (high 7.2)
- [CVE-2026-46955](https://insights.sbomify.com/CVE-2026-46955/): Cross-site scripting in Oracle Human Resources (high 7.5)
- [CVE-2026-46954](https://insights.sbomify.com/CVE-2026-46954/): Missing authorization in Oracle Human Resources (high 7.2)
- [CVE-2026-46953](https://insights.sbomify.com/CVE-2026-46953/): Privilege escalation in Oracle HRMS (UK) (high 7.2)
- [CVE-2026-46952](https://insights.sbomify.com/CVE-2026-46952/): Auth bypass in Oracle Quality (high 8.8)
- [CVE-2026-46951](https://insights.sbomify.com/CVE-2026-46951/): Auth bypass in Oracle Quality (high 8.8)
- [CVE-2026-46950](https://insights.sbomify.com/CVE-2026-46950/): Missing authorization in Oracle Advanced Outbound Telephony (high 8.8)
- [CVE-2026-4695](https://insights.sbomify.com/CVE-2026-4695/): Incorrect boundary conditions in the Audio/Video: Web Codecs component (high 7.5)
- [CVE-2026-46949](https://insights.sbomify.com/CVE-2026-46949/): Missing authorization in Oracle Advanced Outbound Telephony (critical 9.1)
- [CVE-2026-46948](https://insights.sbomify.com/CVE-2026-46948/): Missing authorization in Oracle Utilities Network Management System (medium 4.6)
- [CVE-2026-46947](https://insights.sbomify.com/CVE-2026-46947/): Missing authorization in Oracle Advanced Outbound Telephony (high 8.8)
- [CVE-2026-46946](https://insights.sbomify.com/CVE-2026-46946/): Missing authorization in Oracle iSupport (critical 9.1)
- [CVE-2026-46945](https://insights.sbomify.com/CVE-2026-46945/): Missing authorization in Oracle iSupport (critical 9.1)
- [CVE-2026-46944](https://insights.sbomify.com/CVE-2026-46944/): Missing authorization in Oracle iSupport (critical 9.1)
- [CVE-2026-46943](https://insights.sbomify.com/CVE-2026-46943/): Missing authorization in Oracle Retail EFTLink (high 7.4)
- [CVE-2026-46942](https://insights.sbomify.com/CVE-2026-46942/): Auth bypass in Oracle Process Manufacturing Process Planning (high 8.8)
- [CVE-2026-46941](https://insights.sbomify.com/CVE-2026-46941/): Missing authorization in Oracle Cost Management (high 7.5)
- [CVE-2026-46940](https://insights.sbomify.com/CVE-2026-46940/): Auth bypass in Oracle Cost Management (high 8.8)
- [CVE-2026-4694](https://insights.sbomify.com/CVE-2026-4694/): Incorrect boundary conditions, integer overflow in the Graphics component (high 7.5)
- [CVE-2026-46939](https://insights.sbomify.com/CVE-2026-46939/): Missing authorization in Oracle Configure to Order (high 8.1)
- [CVE-2026-46938](https://insights.sbomify.com/CVE-2026-46938/): Missing authorization in Oracle Cost Management (high 7.2)
- [CVE-2026-46937](https://insights.sbomify.com/CVE-2026-46937/): Auth bypass in Oracle iSetup (high 8.8)
- [CVE-2026-46936](https://insights.sbomify.com/CVE-2026-46936/): Denial of service in MySQL Cluster (medium 4.4)
- [CVE-2026-46935](https://insights.sbomify.com/CVE-2026-46935/): Missing authorization in Oracle Complex Maintenance, Repair and Overhaul (high 7.5)
- [CVE-2026-46934](https://insights.sbomify.com/CVE-2026-46934/): Missing authorization in Oracle Complex Maintenance, Repair and Overhaul (high 7.5)
- [CVE-2026-46933](https://insights.sbomify.com/CVE-2026-46933/): Missing authorization in Oracle Applications Manager (critical 9.9)
- [CVE-2026-46932](https://insights.sbomify.com/CVE-2026-46932/): Missing authorization in Oracle Enterprise Asset Management (high 7.1)
- [CVE-2026-46931](https://insights.sbomify.com/CVE-2026-46931/): Missing authorization in Oracle Enterprise Asset Management (high 8.8)
- [CVE-2026-46930](https://insights.sbomify.com/CVE-2026-46930/): Missing authorization in Oracle In-Memory Cost Management for Discrete Industries (critical 9.1)
- [CVE-2026-4693](https://insights.sbomify.com/CVE-2026-4693/): Incorrect boundary conditions in the Audio/Video: Playback component (high 7.5)
- [CVE-2026-46929](https://insights.sbomify.com/CVE-2026-46929/): Auth bypass in Oracle Cost Management (high 8.8)
- [CVE-2026-46928](https://insights.sbomify.com/CVE-2026-46928/): Auth bypass in Oracle Spares Management (high 8.8)
- [CVE-2026-46927](https://insights.sbomify.com/CVE-2026-46927/): Missing authorization in Oracle Receivables (high 8.1)
- [CVE-2026-46926](https://insights.sbomify.com/CVE-2026-46926/): Missing authorization in Siebel CRM Cloud Applications (high 8.8)
- [CVE-2026-46925](https://insights.sbomify.com/CVE-2026-46925/): Missing authorization in Siebel CRM Cloud Applications (high 8.3)
- [CVE-2026-46924](https://insights.sbomify.com/CVE-2026-46924/): Missing authorization in Oracle Application Testing Suite (critical 9.8)
- [CVE-2026-46923](https://insights.sbomify.com/CVE-2026-46923/): Missing authorization in Oracle Public Sector Financials (International) (high 8.0)
- [CVE-2026-46922](https://insights.sbomify.com/CVE-2026-46922/): Missing authorization in Oracle HR Intelligence (high 7.2)
- [CVE-2026-46921](https://insights.sbomify.com/CVE-2026-46921/): Auth bypass in Siebel CRM Cloud Applications (high 8.8)
- [CVE-2026-46920](https://insights.sbomify.com/CVE-2026-46920/): Auth bypass in Siebel CRM Cloud Applications (high 8.1)
- [CVE-2026-4692](https://insights.sbomify.com/CVE-2026-4692/): Sandbox escape in the Responsive Design Mode component (critical 9.6)
- [CVE-2026-46919](https://insights.sbomify.com/CVE-2026-46919/): Auth bypass in Siebel CRM Cloud Applications (critical 9.8)
- [CVE-2026-46918](https://insights.sbomify.com/CVE-2026-46918/): Missing authorization in Oracle Process Manufacturing Product Development (critical 9.9)
- [CVE-2026-46917](https://insights.sbomify.com/CVE-2026-46917/): Denial of service in Oracle GraalVM Enterprise Edition (medium 5.3)
- [CVE-2026-46916](https://insights.sbomify.com/CVE-2026-46916/): Auth bypass in Oracle Process Manufacturing Product Development (high 8.8)
- [CVE-2026-46915](https://insights.sbomify.com/CVE-2026-46915/): Missing authorization in Oracle Complex Maintenance, Repair and Overhaul (high 8.5)
- [CVE-2026-46914](https://insights.sbomify.com/CVE-2026-46914/): Privilege escalation in Oracle Solaris (high 7.1)
- [CVE-2026-46913](https://insights.sbomify.com/CVE-2026-46913/): Missing authorization in JD Edwards EnterpriseOne Tools (critical 9.3)
- [CVE-2026-46912](https://insights.sbomify.com/CVE-2026-46912/): Missing authorization in JD Edwards EnterpriseOne Tools (critical 9.3)
- [CVE-2026-46911](https://insights.sbomify.com/CVE-2026-46911/): Missing authorization in JD Edwards EnterpriseOne Project Costing (critical 9.6)
- [CVE-2026-46910](https://insights.sbomify.com/CVE-2026-46910/): Missing authorization in JD Edwards EnterpriseOne Tools (critical 9.1)
- [CVE-2026-4691](https://insights.sbomify.com/CVE-2026-4691/): Use-after-free in the CSS Parsing and Computation component (critical 9.8)
- [CVE-2026-46909](https://insights.sbomify.com/CVE-2026-46909/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46908](https://insights.sbomify.com/CVE-2026-46908/): Missing authorization in JD Edwards EnterpriseOne Accounts Payable (critical 9.9)
- [CVE-2026-46907](https://insights.sbomify.com/CVE-2026-46907/): Missing authorization in JD Edwards EnterpriseOne Order Promising (critical 9.9)
- [CVE-2026-46906](https://insights.sbomify.com/CVE-2026-46906/): Missing authorization in JD Edwards EnterpriseOne Tools (critical 9.6)
- [CVE-2026-46905](https://insights.sbomify.com/CVE-2026-46905/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46904](https://insights.sbomify.com/CVE-2026-46904/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46903](https://insights.sbomify.com/CVE-2026-46903/): Auth bypass in JD Edwards EnterpriseOne Tools (high 8.8)
- [CVE-2026-46902](https://insights.sbomify.com/CVE-2026-46902/): Missing authorization in Oracle Enterprise Command Center Framework (critical 9.8)
- [CVE-2026-46901](https://insights.sbomify.com/CVE-2026-46901/): Privilege escalation in Oracle Enterprise Command Center Framework (critical 9.9)
- [CVE-2026-46900](https://insights.sbomify.com/CVE-2026-46900/): Privilege escalation in Oracle Enterprise Command Center Framework (critical 9.9)
- [CVE-2026-4690](https://insights.sbomify.com/CVE-2026-4690/): Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (critical 9.6)
- [CVE-2026-46899](https://insights.sbomify.com/CVE-2026-46899/): Privilege escalation in Oracle Enterprise Command Center Framework (critical 9.6)
- [CVE-2026-46898](https://insights.sbomify.com/CVE-2026-46898/): Missing authorization in Oracle Enterprise Command Center Framework (high 8.1)
- [CVE-2026-46897](https://insights.sbomify.com/CVE-2026-46897/): Missing authorization in Oracle Enterprise Command Center Framework (critical 9.9)
- [CVE-2026-46896](https://insights.sbomify.com/CVE-2026-46896/): Missing authorization in Oracle Enterprise Command Center Framework (critical 9.1)
- [CVE-2026-46895](https://insights.sbomify.com/CVE-2026-46895/): Privilege escalation in Oracle Enterprise Command Center Framework (critical 9.9)
- [CVE-2026-46894](https://insights.sbomify.com/CVE-2026-46894/): Open redirect in Oracle iSupplier Portal (high 8.0)
- [CVE-2026-46893](https://insights.sbomify.com/CVE-2026-46893/): Privilege escalation in JD Edwards EnterpriseOne General Ledger (critical 9.9)
- [CVE-2026-46892](https://insights.sbomify.com/CVE-2026-46892/): Missing authorization in JD Edwards EnterpriseOne Human Resources Management (critical 9.1)
- [CVE-2026-46891](https://insights.sbomify.com/CVE-2026-46891/): Missing authorization in JD Edwards EnterpriseOne Accounts Payable (high 8.1)
- [CVE-2026-46890](https://insights.sbomify.com/CVE-2026-46890/): Auth bypass in Siebel Apps - Marketing (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/607/