Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 608 of 1013.
- CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
- CVE-2026-46889 Missing authorization in Siebel Apps - Marketing
- CVE-2026-46888 Missing authorization in Siebel CRM Deployment
- CVE-2026-46887 Missing authorization in Siebel Apps - Marketing
- CVE-2026-46886 Missing authorization in Siebel Apps - Marketing
- CVE-2026-46885 Privilege escalation in Siebel CRM Integration
- CVE-2026-46884 Missing authorization in Siebel Apps - Marketing
- CVE-2026-46883 Missing authorization in JD Edwards EnterpriseOne Tools
- CVE-2026-46882 Missing authorization in JD Edwards EnterpriseOne Tools
- CVE-2026-46881 Missing authorization in JD Edwards EnterpriseOne Tools
- CVE-2026-46880 Missing authorization in JD Edwards EnterpriseOne Tools
- CVE-2026-4688 Sandbox escape due to use-after-free in the Disability Access APIs component
- CVE-2026-46879 Auth bypass in JD Edwards EnterpriseOne Tools
- CVE-2026-46878 Missing authorization in JD Edwards EnterpriseOne Tools
- CVE-2026-46877 Privilege escalation in Oracle VM VirtualBox
- CVE-2026-46876 Missing authorization in Oracle Application Testing Suite
- CVE-2026-46875 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46874 Information disclosure in Oracle VM VirtualBox
- CVE-2026-46873 Privilege escalation in Oracle VM VirtualBox
- CVE-2026-46872 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46871 Missing authorization in MySQL Shell
- CVE-2026-46870 Other in MySQL Shell
- CVE-2026-4687 Sandbox escape due to incorrect boundary conditions in the Telemetry component
- CVE-2026-46869 Cross-site request forgery in MySQL Shell
- CVE-2026-46868 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46867 Privilege escalation in Oracle Enterprise Manager Base Platform
- CVE-2026-46866 Denial of service in Oracle Enterprise Manager Base Platform
- CVE-2026-46865 Other in Oracle Enterprise Manager Base Platform
- CVE-2026-46864 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46863 Denial of service in MySQL Cluster
- CVE-2026-46862 Denial of service in MySQL Router
- CVE-2026-46861 Missing authorization in MySQL NDB Cluster
- CVE-2026-46860 Missing authorization in MySQL Router
- CVE-2026-4686 Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-46859 Auth bypass in Oracle Agile PLM
- CVE-2026-46858 Missing authorization in APM - Application Performance Management
- CVE-2026-46857 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46856 Cross-site scripting in Oracle Enterprise Manager Base Platform
- CVE-2026-46855 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46854 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46853 Cross-site scripting in Oracle Enterprise Manager Base Platform
- CVE-2026-46852 Privilege escalation in Oracle Enterprise Manager Base Platform
- CVE-2026-46851 Code injection in PeopleSoft Enterprise CS Campus Community
- CVE-2026-46850 Code injection in MySQL Shell
- CVE-2026-4685 Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-46849 Missing authorization in PeopleSoft Enterprise CS Student Financials
- CVE-2026-46848 Missing authorization in WebLogic Server
- CVE-2026-46847 Missing authorization in Oracle WebCenter Portal
- CVE-2026-46846 Auth bypass in Oracle WebCenter Portal
- CVE-2026-46845 Auth bypass in Oracle WebCenter Portal
- CVE-2026-46844 Missing authorization in Oracle WebCenter Portal
- CVE-2026-46843 Denial of service in Oracle REST Data Services
- CVE-2026-46842 Missing authorization in Oracle REST Data Services
- CVE-2026-46841 Information disclosure in Oracle REST Data Services
- CVE-2026-46840 Auth bypass in Oracle REST Data Services
- CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component
- CVE-2026-46839 Missing authorization in Oracle REST Data Services
- CVE-2026-46838 Missing authorization in Oracle WebCenter Portal
- CVE-2026-46837 Privilege escalation in Oracle Flow Manufacturing
- CVE-2026-46835 Denial of service in Oracle Database Server
- CVE-2026-46834 Denial of service in Oracle Database Server
- CVE-2026-46833 Other in Oracle Database Server
- CVE-2026-46832 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-46830 Information disclosure in Oracle REST Data Services
- CVE-2026-4683 Smartcat Translator for WPML <= 3.1.77 - Missing Authorization to Unauthenticated Plugin Settings Update
- CVE-2026-46829 Denial of service in Oracle REST Data Services
- CVE-2026-46828 Missing authorization in Oracle Payroll
- CVE-2026-46827 Auth bypass in Oracle Payroll
- CVE-2026-46826 Missing authorization in Oracle Payroll
- CVE-2026-46825 Other in Oracle VM VirtualBox
- CVE-2026-46824 Missing authorization in Oracle Universal Work Queue
- CVE-2026-46823 Missing authorization in Oracle Public Sector Financials (International)
- CVE-2026-46822 Missing authorization in Oracle iAssets
- CVE-2026-46821 Missing authorization in Oracle Financials Common Modules
- CVE-2026-46820 Missing authorization in Oracle Financials Common Modules
- CVE-2026-4682 Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow
- CVE-2026-46819 Missing authorization in Oracle Internet Procurement Connector
- CVE-2026-46818 Missing authorization in Oracle Payments
- CVE-2026-46817 Oracle E-Business Suite Improper Privilege Management
- CVE-2026-46816 Information disclosure in Oracle VM VirtualBox
- CVE-2026-46815 Information disclosure in Oracle VM VirtualBox
- CVE-2026-46814 Missing authorization in Oracle WebCenter Portal
- CVE-2026-46813 Auth bypass in Oracle WebCenter Content
- CVE-2026-46812 Other in Oracle Access Manager
- CVE-2026-46810 Missing authorization in Identity Manager
- CVE-2026-4681 Critical Remote Code Execution vulnerability reported in Windchill
- CVE-2026-46809 Missing authorization in Oracle WebCenter Sites
- CVE-2026-46808 Missing authorization in Oracle WebCenter Content
- CVE-2026-46807 Auth bypass in Identity Manager
- CVE-2026-46806 Open redirect in Oracle WebCenter Content
- CVE-2026-46805 Missing authorization in Oracle WebCenter Content
- CVE-2026-46804 Privilege escalation in Oracle WebCenter Content
- CVE-2026-46803 Auth bypass in Oracle WebCenter Portal
- CVE-2026-46802 Missing authorization in Oracle WebCenter Portal
- CVE-2026-46801 Missing authorization in Oracle WebCenter Sites
- CVE-2026-46800 Auth bypass in Oracle WebCenter Sites
- CVE-2026-4680 Use after free in Chrome
- CVE-2026-46799 Auth bypass in Oracle WebCenter Sites
- CVE-2026-46798 Auth bypass in Oracle WebCenter Sites
- CVE-2026-46797 Missing authorization in Oracle WebCenter Sites