# Vulnerabilities published in 2026


- [CVE-2026-101595](https://insights.sbomify.com/CVE-2026-101595/): Other in Oracle Agile Product Lifecycle Management for Process (medium 5.4)
- [CVE-2026-101594](https://insights.sbomify.com/CVE-2026-101594/): Other in Oracle Agile Product Lifecycle Management for Process (high 8.8)
- [CVE-2026-101593](https://insights.sbomify.com/CVE-2026-101593/): Denial of service in Oracle Agile Product Lifecycle Management for Process (high 8.3)
- [CVE-2026-101592](https://insights.sbomify.com/CVE-2026-101592/): Other in Oracle Agile Product Lifecycle Management for Process (medium 5.4)
- [CVE-2026-101591](https://insights.sbomify.com/CVE-2026-101591/): Information disclosure in Oracle Agile Product Lifecycle Management for Process (medium 4.3)
- [CVE-2026-101590](https://insights.sbomify.com/CVE-2026-101590/): Auth bypass in Helidon (critical 9.1)
- [CVE-2026-10159](https://insights.sbomify.com/CVE-2026-10159/): TRENDnet TEW-432BRP formSysLog stack-based overflow (high 8.7)
- [CVE-2026-101589](https://insights.sbomify.com/CVE-2026-101589/): Information disclosure in Oracle Utilities Network Management System (medium 5.3)
- [CVE-2026-101588](https://insights.sbomify.com/CVE-2026-101588/): Information disclosure in Helidon (medium 5.3)
- [CVE-2026-101587](https://insights.sbomify.com/CVE-2026-101587/): Denial of service in Helidon (medium 5.3)
- [CVE-2026-101586](https://insights.sbomify.com/CVE-2026-101586/): Information disclosure in Helidon (medium 5.3)
- [CVE-2026-101585](https://insights.sbomify.com/CVE-2026-101585/): Other in Helidon (high 7.2)
- [CVE-2026-101584](https://insights.sbomify.com/CVE-2026-101584/): Denial of service in Helidon (medium 6.5)
- [CVE-2026-101583](https://insights.sbomify.com/CVE-2026-101583/): Denial of service in Helidon (high 7.0)
- [CVE-2026-101582](https://insights.sbomify.com/CVE-2026-101582/): Information disclosure in Helidon (medium 5.8)
- [CVE-2026-101581](https://insights.sbomify.com/CVE-2026-101581/): Missing authorization in Helidon (medium 6.5)
- [CVE-2026-101580](https://insights.sbomify.com/CVE-2026-101580/): Information disclosure in Helidon (medium 5.8)
- [CVE-2026-10158](https://insights.sbomify.com/CVE-2026-10158/): TRENDnet TEW-432BRP formPortFw stack-based overflow (high 8.7)
- [CVE-2026-101579](https://insights.sbomify.com/CVE-2026-101579/): Other in Helidon (high 7.2)
- [CVE-2026-101578](https://insights.sbomify.com/CVE-2026-101578/): Information disclosure in Helidon (medium 5.3)
- [CVE-2026-101577](https://insights.sbomify.com/CVE-2026-101577/): Other in Helidon (low 3.1)
- [CVE-2026-101576](https://insights.sbomify.com/CVE-2026-101576/): Information disclosure in Helidon (low 3.7)
- [CVE-2026-101575](https://insights.sbomify.com/CVE-2026-101575/): Denial of service in Helidon (medium 6.5)
- [CVE-2026-101574](https://insights.sbomify.com/CVE-2026-101574/): Other in Helidon (medium 6.9)
- [CVE-2026-101573](https://insights.sbomify.com/CVE-2026-101573/): Other in Helidon (medium 6.8)
- [CVE-2026-101572](https://insights.sbomify.com/CVE-2026-101572/): Denial of service in Helidon (high 7.5)
- [CVE-2026-101571](https://insights.sbomify.com/CVE-2026-101571/): Other in Helidon (medium 5.6)
- [CVE-2026-101570](https://insights.sbomify.com/CVE-2026-101570/): Denial of service in Helidon (low 3.7)
- [CVE-2026-10157](https://insights.sbomify.com/CVE-2026-10157/): Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication (medium 6.9)
- [CVE-2026-101569](https://insights.sbomify.com/CVE-2026-101569/): Missing authorization in Helidon (medium 6.5)
- [CVE-2026-101568](https://insights.sbomify.com/CVE-2026-101568/): Information disclosure in Helidon (medium 5.3)
- [CVE-2026-101567](https://insights.sbomify.com/CVE-2026-101567/): Missing authorization in Oracle Cost Management (high 8.8)
- [CVE-2026-101566](https://insights.sbomify.com/CVE-2026-101566/): Privilege escalation in Oracle Application Object Library (high 7.8)
- [CVE-2026-101565](https://insights.sbomify.com/CVE-2026-101565/): Information disclosure in Oracle Agile PLM (medium 6.2)
- [CVE-2026-101564](https://insights.sbomify.com/CVE-2026-101564/): Information disclosure in Oracle Agile PLM (medium 5.9)
- [CVE-2026-101562](https://insights.sbomify.com/CVE-2026-101562/): Information disclosure in Oracle Agile PLM (high 7.5)
- [CVE-2026-101560](https://insights.sbomify.com/CVE-2026-101560/): Other in Oracle Commerce Platform (high 7.1)
- [CVE-2026-10156](https://insights.sbomify.com/CVE-2026-10156/): Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption (medium 5.3)
- [CVE-2026-101559](https://insights.sbomify.com/CVE-2026-101559/): Other in Oracle Purchasing (medium 6.5)
- [CVE-2026-101558](https://insights.sbomify.com/CVE-2026-101558/): Other in Oracle Purchasing (medium 6.1)
- [CVE-2026-101557](https://insights.sbomify.com/CVE-2026-101557/): Missing authorization in Oracle Purchasing (high 8.8)
- [CVE-2026-101556](https://insights.sbomify.com/CVE-2026-101556/): Other in Oracle Payroll (high 7.5)
- [CVE-2026-101555](https://insights.sbomify.com/CVE-2026-101555/): Other in Oracle Payroll (high 7.5)
- [CVE-2026-101554](https://insights.sbomify.com/CVE-2026-101554/): Other in Oracle Payroll (high 7.5)
- [CVE-2026-101553](https://insights.sbomify.com/CVE-2026-101553/): Other in Oracle Payroll (medium 6.5)
- [CVE-2026-101552](https://insights.sbomify.com/CVE-2026-101552/): Other in Oracle Application Object Library (high 7.5)
- [CVE-2026-101551](https://insights.sbomify.com/CVE-2026-101551/): Information disclosure in Oracle Applications Manager (high 7.5)
- [CVE-2026-10155](https://insights.sbomify.com/CVE-2026-10155/): Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection (medium 5.1)
- [CVE-2026-101549](https://insights.sbomify.com/CVE-2026-101549/): Other in Oracle Application Testing Suite (high 7.8)
- [CVE-2026-101548](https://insights.sbomify.com/CVE-2026-101548/): Other in Oracle Application Testing Suite (high 7.0)
- [CVE-2026-101547](https://insights.sbomify.com/CVE-2026-101547/): Other in Oracle Demand Planning (medium 6.1)
- [CVE-2026-101546](https://insights.sbomify.com/CVE-2026-101546/): Other in Oracle Materials Requirement Planning (high 7.5)
- [CVE-2026-101545](https://insights.sbomify.com/CVE-2026-101545/): Other in Oracle Inventory Management (high 7.0)
- [CVE-2026-101544](https://insights.sbomify.com/CVE-2026-101544/): Other in Oracle Payroll (high 7.0)
- [CVE-2026-101543](https://insights.sbomify.com/CVE-2026-101543/): Other in Oracle Capacity (high 7.5)
- [CVE-2026-101542](https://insights.sbomify.com/CVE-2026-101542/): Other in Oracle Capacity (high 8.8)
- [CVE-2026-101541](https://insights.sbomify.com/CVE-2026-101541/): Other in Oracle Capacity (high 7.7)
- [CVE-2026-101540](https://insights.sbomify.com/CVE-2026-101540/): Other in Oracle Capacity (high 7.7)
- [CVE-2026-10154](https://insights.sbomify.com/CVE-2026-10154/): Dolibarr ERP CRM messaging.php authorization (medium 5.3)
- [CVE-2026-101539](https://insights.sbomify.com/CVE-2026-101539/): Other in Oracle Payroll (medium 6.5)
- [CVE-2026-101538](https://insights.sbomify.com/CVE-2026-101538/): Other in Oracle Order Management (medium 6.5)
- [CVE-2026-101537](https://insights.sbomify.com/CVE-2026-101537/): Auth bypass in Oracle Solaris (critical 9.8)
- [CVE-2026-101536](https://insights.sbomify.com/CVE-2026-101536/): Other in Oracle Cost Management (high 7.5)
- [CVE-2026-101535](https://insights.sbomify.com/CVE-2026-101535/): Other in Oracle Sales Foundation (high 7.5)
- [CVE-2026-101534](https://insights.sbomify.com/CVE-2026-101534/): Other in Oracle EDI Gateway (high 8.5)
- [CVE-2026-101533](https://insights.sbomify.com/CVE-2026-101533/): Other in Oracle EDI Gateway (medium 6.6)
- [CVE-2026-101532](https://insights.sbomify.com/CVE-2026-101532/): Other in Oracle EDI Gateway (high 7.2)
- [CVE-2026-101531](https://insights.sbomify.com/CVE-2026-101531/): Other in Oracle Business Intelligence Enterprise Edition (high 7.5)
- [CVE-2026-10153](https://insights.sbomify.com/CVE-2026-10153/): westboy CicadasCMS AbstractCacheManager.java search cross site scripting (medium 5.3)
- [CVE-2026-101529](https://insights.sbomify.com/CVE-2026-101529/): Other in Oracle Enterprise Manager for Oracle Database (critical 9.9)
- [CVE-2026-101528](https://insights.sbomify.com/CVE-2026-101528/): Other in Oracle Enterprise Manager for Oracle Database (critical 9.9)
- [CVE-2026-101527](https://insights.sbomify.com/CVE-2026-101527/): Other in Oracle Enterprise Manager Base Platform (high 7.8)
- [CVE-2026-101526](https://insights.sbomify.com/CVE-2026-101526/): Other in Oracle Enterprise Manager for Siebel (high 8.8)
- [CVE-2026-101525](https://insights.sbomify.com/CVE-2026-101525/): Other in Oracle Enterprise Manager for Siebel (high 8.8)
- [CVE-2026-101524](https://insights.sbomify.com/CVE-2026-101524/): Denial of service in Oracle Enterprise Manager Base Platform (medium 5.6)
- [CVE-2026-101522](https://insights.sbomify.com/CVE-2026-101522/): Information disclosure in Oracle TimesTen In-Memory Database (medium 5.5)
- [CVE-2026-101521](https://insights.sbomify.com/CVE-2026-101521/): Auth bypass in Oracle APEX (critical 9.8)
- [CVE-2026-101520](https://insights.sbomify.com/CVE-2026-101520/): Denial of service in Oracle Global Lifecycle Management NextGen OUI Framework (high 7.5)
- [CVE-2026-10152](https://insights.sbomify.com/CVE-2026-10152/): TaleLin lin-cms-spring-boot book Endpoint BookController.java access control (medium 5.3)
- [CVE-2026-101519](https://insights.sbomify.com/CVE-2026-101519/): Other in Oracle EDI Gateway (high 7.2)
- [CVE-2026-101518](https://insights.sbomify.com/CVE-2026-101518/): Other in Oracle Enterprise Manager Base Platform (high 8.8)
- [CVE-2026-101517](https://insights.sbomify.com/CVE-2026-101517/): Information disclosure in Oracle Utilities Network Management System (medium 5.5)
- [CVE-2026-101516](https://insights.sbomify.com/CVE-2026-101516/): Other in Oracle GraalVM Enterprise Edition (medium 6.5)
- [CVE-2026-101515](https://insights.sbomify.com/CVE-2026-101515/): Information disclosure in Oracle WebLogic Server (medium 5.9)
- [CVE-2026-101513](https://insights.sbomify.com/CVE-2026-101513/): Denial of service in MySQL Cluster (low 3.8)
- [CVE-2026-101512](https://insights.sbomify.com/CVE-2026-101512/): Other in Oracle Database Server (medium 6.5)
- [CVE-2026-101511](https://insights.sbomify.com/CVE-2026-101511/): Information disclosure in Oracle Enterprise Manager Base Platform (medium 4.3)
- [CVE-2026-101510](https://insights.sbomify.com/CVE-2026-101510/): Denial of service in Oracle Net Services (medium 4.4)
- [CVE-2026-101508](https://insights.sbomify.com/CVE-2026-101508/): Denial of service in Siebel CRM Integration (high 7.5)
- [CVE-2026-101507](https://insights.sbomify.com/CVE-2026-101507/): Other in Oracle Trusted Answer Search (medium 6.5)
- [CVE-2026-101506](https://insights.sbomify.com/CVE-2026-101506/): Other in Oracle Trusted Answer Search (high 7.7)
- [CVE-2026-101505](https://insights.sbomify.com/CVE-2026-101505/): Other in Oracle Trusted Answer Search (high 8.7)
- [CVE-2026-101504](https://insights.sbomify.com/CVE-2026-101504/): Other in Oracle Trusted Answer Search (high 7.6)
- [CVE-2026-101503](https://insights.sbomify.com/CVE-2026-101503/): Other in Oracle Trusted Answer Search (critical 9.9)
- [CVE-2026-101502](https://insights.sbomify.com/CVE-2026-101502/): Denial of service in Oracle Trusted Answer Search (medium 5.0)
- [CVE-2026-101501](https://insights.sbomify.com/CVE-2026-101501/): Other in Oracle Trusted Answer Search (critical 9.9)
- [CVE-2026-101500](https://insights.sbomify.com/CVE-2026-101500/): Other in Oracle Global Lifecycle Management OPatchAuto (medium 6.5)
- [CVE-2026-1015](https://insights.sbomify.com/CVE-2026-1015/): IBM InfoSphere Information Server is vulnerable to server-side request forgery (medium 5.4)
- [CVE-2026-101499](https://insights.sbomify.com/CVE-2026-101499/): Auth bypass in Oracle WebCenter Sites (critical 9.8)
- [CVE-2026-101498](https://insights.sbomify.com/CVE-2026-101498/): Other in Oracle Trusted Answer Search (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/994/