# Vulnerabilities published in 2026


- [CVE-2026-10169](https://insights.sbomify.com/CVE-2026-10169/): Business logic in School Student Management System (medium 6.3)
- [CVE-2026-101689](https://insights.sbomify.com/CVE-2026-101689/): Missing authorization in Oracle E-Business Suite Integrated SOA Gateway (high 7.7)
- [CVE-2026-101688](https://insights.sbomify.com/CVE-2026-101688/): Missing authorization in Oracle E-Business Suite Integrated SOA Gateway (high 8.6)
- [CVE-2026-101687](https://insights.sbomify.com/CVE-2026-101687/): Missing authorization in Oracle E-Business Suite Integrated SOA Gateway (high 7.5)
- [CVE-2026-101686](https://insights.sbomify.com/CVE-2026-101686/): Missing authorization in Oracle E-Business Suite Integrated SOA Gateway (high 8.8)
- [CVE-2026-101685](https://insights.sbomify.com/CVE-2026-101685/): Missing authorization in Oracle E-Business Suite Integrated SOA Gateway (high 8.8)
- [CVE-2026-101684](https://insights.sbomify.com/CVE-2026-101684/): Missing authorization in Oracle E-Business Suite Integrated SOA Gateway (high 8.3)
- [CVE-2026-101683](https://insights.sbomify.com/CVE-2026-101683/): Other in Applications DBA (high 7.0)
- [CVE-2026-101682](https://insights.sbomify.com/CVE-2026-101682/): Other in Applications DBA (high 7.8)
- [CVE-2026-101681](https://insights.sbomify.com/CVE-2026-101681/): Other in Applications DBA (high 7.0)
- [CVE-2026-101680](https://insights.sbomify.com/CVE-2026-101680/): Missing authorization in Oracle Communications Billing and Revenue Management (high 7.4)
- [CVE-2026-10168](https://insights.sbomify.com/CVE-2026-10168/): OUSL-GROUP-BrinaryBrains School Student Management System Parents.php marks resource injection (medium 5.3)
- [CVE-2026-101679](https://insights.sbomify.com/CVE-2026-101679/): Denial of service in MySQL Cluster (high 7.5)
- [CVE-2026-101678](https://insights.sbomify.com/CVE-2026-101678/): Denial of service in MySQL Connectors (medium 4.3)
- [CVE-2026-101677](https://insights.sbomify.com/CVE-2026-101677/): Other in MySQL Connectors (medium 4.3)
- [CVE-2026-101676](https://insights.sbomify.com/CVE-2026-101676/): Missing authorization in Oracle Concurrent Processing (high 7.8)
- [CVE-2026-101675](https://insights.sbomify.com/CVE-2026-101675/): Missing authorization in Oracle Mobile Field Service (medium 6.7)
- [CVE-2026-101674](https://insights.sbomify.com/CVE-2026-101674/): Missing authorization in Oracle Mobile Field Service (medium 6.7)
- [CVE-2026-101673](https://insights.sbomify.com/CVE-2026-101673/): Missing authorization in Oracle US Federal Human Resources (medium 6.5)
- [CVE-2026-101672](https://insights.sbomify.com/CVE-2026-101672/): Missing authorization in Oracle Call Center Technology (high 8.1)
- [CVE-2026-101671](https://insights.sbomify.com/CVE-2026-101671/): Missing authorization in Oracle Email Center (medium 6.1)
- [CVE-2026-101670](https://insights.sbomify.com/CVE-2026-101670/): Missing authorization in Oracle Email Center (medium 6.5)
- [CVE-2026-10167](https://insights.sbomify.com/CVE-2026-10167/): Auth bypass in School Student Management System (medium 6.9)
- [CVE-2026-101669](https://insights.sbomify.com/CVE-2026-101669/): Missing authorization in Oracle Public Sector Human Resources (medium 6.8)
- [CVE-2026-101668](https://insights.sbomify.com/CVE-2026-101668/): Missing authorization in Oracle Customer Care (medium 6.1)
- [CVE-2026-101667](https://insights.sbomify.com/CVE-2026-101667/): Missing authorization in Oracle Trade Management (medium 5.4)
- [CVE-2026-101666](https://insights.sbomify.com/CVE-2026-101666/): Missing authorization in Oracle Trade Management (medium 5.4)
- [CVE-2026-101665](https://insights.sbomify.com/CVE-2026-101665/): Missing authorization in Oracle Mobile Field Service (high 8.1)
- [CVE-2026-101664](https://insights.sbomify.com/CVE-2026-101664/): Missing authorization in Oracle Mobile Field Service (high 8.8)
- [CVE-2026-101662](https://insights.sbomify.com/CVE-2026-101662/): Missing authorization in Oracle Mobile Field Service (high 7.1)
- [CVE-2026-101661](https://insights.sbomify.com/CVE-2026-101661/): Missing authorization in Oracle Mobile Field Service (high 7.4)
- [CVE-2026-101660](https://insights.sbomify.com/CVE-2026-101660/): Missing authorization in Oracle Mobile Field Service (high 7.5)
- [CVE-2026-10166](https://insights.sbomify.com/CVE-2026-10166/): Edimax BR-6478AC POST Request formWlbasic command injection (medium 5.3)
- [CVE-2026-101658](https://insights.sbomify.com/CVE-2026-101658/): Missing authorization in Oracle Mobile Field Service (high 7.4)
- [CVE-2026-101656](https://insights.sbomify.com/CVE-2026-101656/): Missing authorization in Oracle Mobile Field Service (high 8.8)
- [CVE-2026-101655](https://insights.sbomify.com/CVE-2026-101655/): Missing authorization in Oracle Mobile Field Service (high 8.8)
- [CVE-2026-101654](https://insights.sbomify.com/CVE-2026-101654/): Missing authorization in Oracle Mobile Field Service (high 8.8)
- [CVE-2026-101653](https://insights.sbomify.com/CVE-2026-101653/): Missing authorization in Oracle Mobile Field Service (high 8.8)
- [CVE-2026-101651](https://insights.sbomify.com/CVE-2026-101651/): Missing authorization in Oracle Partner Management (medium 6.5)
- [CVE-2026-101650](https://insights.sbomify.com/CVE-2026-101650/): Missing authorization in Oracle Partner Management (high 7.1)
- [CVE-2026-10165](https://insights.sbomify.com/CVE-2026-10165/): Edimax BR-6478AC POST Request formWanTcpipSetup stack-based overflow (high 8.7)
- [CVE-2026-101649](https://insights.sbomify.com/CVE-2026-101649/): Missing authorization in Oracle Partner Management (high 7.1)
- [CVE-2026-101648](https://insights.sbomify.com/CVE-2026-101648/): Missing authorization in Oracle Partner Management (high 8.4)
- [CVE-2026-101647](https://insights.sbomify.com/CVE-2026-101647/): Missing authorization in Oracle iSetup (high 7.5)
- [CVE-2026-101646](https://insights.sbomify.com/CVE-2026-101646/): Missing authorization in Oracle iSetup (high 7.2)
- [CVE-2026-101645](https://insights.sbomify.com/CVE-2026-101645/): Missing authorization in Oracle iSetup (high 7.5)
- [CVE-2026-101644](https://insights.sbomify.com/CVE-2026-101644/): Missing authorization in Oracle Mobile Field Service (medium 6.6)
- [CVE-2026-101643](https://insights.sbomify.com/CVE-2026-101643/): Missing authorization in Oracle Sales Online (high 7.1)
- [CVE-2026-101642](https://insights.sbomify.com/CVE-2026-101642/): Missing authorization in Oracle Report Manager (high 7.1)
- [CVE-2026-101641](https://insights.sbomify.com/CVE-2026-101641/): Missing authorization in Oracle Report Manager (high 7.6)
- [CVE-2026-101640](https://insights.sbomify.com/CVE-2026-101640/): Missing authorization in Oracle Marketing (high 8.2)
- [CVE-2026-10164](https://insights.sbomify.com/CVE-2026-10164/): Edimax BR-6478AC POST Request formUSBFolder buffer overflow (high 8.7)
- [CVE-2026-101639](https://insights.sbomify.com/CVE-2026-101639/): Missing authorization in Oracle Marketing (medium 5.4)
- [CVE-2026-101638](https://insights.sbomify.com/CVE-2026-101638/): Other in Applications DBA (high 7.3)
- [CVE-2026-101637](https://insights.sbomify.com/CVE-2026-101637/): Other in MySQL Cluster (medium 5.5)
- [CVE-2026-101636](https://insights.sbomify.com/CVE-2026-101636/): Missing authorization in Oracle Mobile Field Service (high 7.4)
- [CVE-2026-101635](https://insights.sbomify.com/CVE-2026-101635/): Missing authorization in Oracle Mobile Field Service (high 8.8)
- [CVE-2026-101634](https://insights.sbomify.com/CVE-2026-101634/): Missing authorization in Oracle Mobile Field Service (critical 9.1)
- [CVE-2026-101633](https://insights.sbomify.com/CVE-2026-101633/): Missing authorization in MySQL Router (medium 4.3)
- [CVE-2026-101632](https://insights.sbomify.com/CVE-2026-101632/): Missing authorization in MySQL Router (medium 4.3)
- [CVE-2026-101631](https://insights.sbomify.com/CVE-2026-101631/): Missing authorization in MySQL Router (medium 6.8)
- [CVE-2026-101630](https://insights.sbomify.com/CVE-2026-101630/): Missing authorization in Oracle Advanced Outbound Telephony (medium 5.4)
- [CVE-2026-10163](https://insights.sbomify.com/CVE-2026-10163/): Edimax BR-6478AC POST Request formUSBAccount buffer overflow (high 8.7)
- [CVE-2026-101629](https://insights.sbomify.com/CVE-2026-101629/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101628](https://insights.sbomify.com/CVE-2026-101628/): Denial of service in MySQL Cluster (medium 6.5)
- [CVE-2026-101627](https://insights.sbomify.com/CVE-2026-101627/): Denial of service in MySQL Cluster (medium 4.4)
- [CVE-2026-101626](https://insights.sbomify.com/CVE-2026-101626/): Missing authorization in MySQL Connectors (medium 5.9)
- [CVE-2026-101625](https://insights.sbomify.com/CVE-2026-101625/): Missing authorization in MySQL Connectors (medium 4.3)
- [CVE-2026-101624](https://insights.sbomify.com/CVE-2026-101624/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101623](https://insights.sbomify.com/CVE-2026-101623/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101622](https://insights.sbomify.com/CVE-2026-101622/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101621](https://insights.sbomify.com/CVE-2026-101621/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101620](https://insights.sbomify.com/CVE-2026-101620/): Denial of service in MySQL Cluster (medium 6.5)
- [CVE-2026-10162](https://insights.sbomify.com/CVE-2026-10162/): TRENDnet TEW-432BRP formSetPassword stack-based overflow (high 8.7)
- [CVE-2026-101619](https://insights.sbomify.com/CVE-2026-101619/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101618](https://insights.sbomify.com/CVE-2026-101618/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101617](https://insights.sbomify.com/CVE-2026-101617/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101616](https://insights.sbomify.com/CVE-2026-101616/): Denial of service in MySQL Cluster (medium 6.5)
- [CVE-2026-101615](https://insights.sbomify.com/CVE-2026-101615/): Denial of service in MySQL Cluster (medium 4.4)
- [CVE-2026-101614](https://insights.sbomify.com/CVE-2026-101614/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101613](https://insights.sbomify.com/CVE-2026-101613/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101612](https://insights.sbomify.com/CVE-2026-101612/): Denial of service in MySQL Cluster (medium 4.0)
- [CVE-2026-101611](https://insights.sbomify.com/CVE-2026-101611/): Denial of service in MySQL Cluster (medium 4.4)
- [CVE-2026-101610](https://insights.sbomify.com/CVE-2026-101610/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-10161](https://insights.sbomify.com/CVE-2026-10161/): TRENDnet TEW-432BRP formResetStatistic stack-based overflow (high 8.7)
- [CVE-2026-101609](https://insights.sbomify.com/CVE-2026-101609/): Denial of service in MySQL Cluster (medium 4.4)
- [CVE-2026-101608](https://insights.sbomify.com/CVE-2026-101608/): Denial of service in MySQL Cluster (medium 6.5)
- [CVE-2026-101607](https://insights.sbomify.com/CVE-2026-101607/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2026-101606](https://insights.sbomify.com/CVE-2026-101606/): Other in Oracle Communications Billing and Revenue Management (medium 6.5)
- [CVE-2026-101605](https://insights.sbomify.com/CVE-2026-101605/): Information disclosure in Oracle Utilities Network Management System (medium 5.3)
- [CVE-2026-101604](https://insights.sbomify.com/CVE-2026-101604/): Other in Oracle Communications Unified Inventory Management (high 7.5)
- [CVE-2026-101603](https://insights.sbomify.com/CVE-2026-101603/): Other in Oracle Communications Unified Inventory Management (high 7.5)
- [CVE-2026-101602](https://insights.sbomify.com/CVE-2026-101602/): Other in Oracle Agile Product Lifecycle Management for Process (high 8.0)
- [CVE-2026-101601](https://insights.sbomify.com/CVE-2026-101601/): Information disclosure in Oracle GoldenGate (medium 5.5)
- [CVE-2026-101600](https://insights.sbomify.com/CVE-2026-101600/): Other in Oracle TimesTen In-Memory Database (low 3.6)
- [CVE-2026-10160](https://insights.sbomify.com/CVE-2026-10160/): TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow (high 8.7)
- [CVE-2026-101599](https://insights.sbomify.com/CVE-2026-101599/): Other in Oracle VM VirtualBox (high 7.5)
- [CVE-2026-101598](https://insights.sbomify.com/CVE-2026-101598/): Other in Oracle VM VirtualBox (high 7.8)
- [CVE-2026-101597](https://insights.sbomify.com/CVE-2026-101597/): Information disclosure in Oracle ZFS Storage Appliance Kit (medium 5.3)
- [CVE-2026-101596](https://insights.sbomify.com/CVE-2026-101596/): Other in Oracle Agile Product Lifecycle Management for Process (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/993/