# Vulnerabilities published in 2026


- [CVE-2026-101497](https://insights.sbomify.com/CVE-2026-101497/): Denial of service in Oracle Identity Manager (medium 4.3)
- [CVE-2026-101495](https://insights.sbomify.com/CVE-2026-101495/): Other in Siebel CRM Development (high 8.8)
- [CVE-2026-101494](https://insights.sbomify.com/CVE-2026-101494/): Other in Oracle REST Data Services (high 7.7)
- [CVE-2026-101493](https://insights.sbomify.com/CVE-2026-101493/): Other in Oracle REST Data Services (medium 5.4)
- [CVE-2026-101492](https://insights.sbomify.com/CVE-2026-101492/): Other in Siebel CRM Integration (medium 4.7)
- [CVE-2026-101491](https://insights.sbomify.com/CVE-2026-101491/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 5.0)
- [CVE-2026-101490](https://insights.sbomify.com/CVE-2026-101490/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 6.1)
- [CVE-2026-101489](https://insights.sbomify.com/CVE-2026-101489/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 4.3)
- [CVE-2026-101488](https://insights.sbomify.com/CVE-2026-101488/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 6.5)
- [CVE-2026-101487](https://insights.sbomify.com/CVE-2026-101487/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 5.4)
- [CVE-2026-101486](https://insights.sbomify.com/CVE-2026-101486/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 5.4)
- [CVE-2026-101485](https://insights.sbomify.com/CVE-2026-101485/): Information disclosure in Oracle Autonomous Health Framework (medium 6.5)
- [CVE-2026-101484](https://insights.sbomify.com/CVE-2026-101484/): Auth bypass in Oracle Secure Backup (critical 9.8)
- [CVE-2026-101483](https://insights.sbomify.com/CVE-2026-101483/): Denial of service in Oracle Secure Backup (medium 6.5)
- [CVE-2026-101482](https://insights.sbomify.com/CVE-2026-101482/): Missing authorization in Oracle Secure Backup (high 7.8)
- [CVE-2026-101481](https://insights.sbomify.com/CVE-2026-101481/): Missing authorization in Oracle Secure Backup (high 8.8)
- [CVE-2026-101480](https://insights.sbomify.com/CVE-2026-101480/): Information disclosure in Oracle Secure Backup (medium 5.3)
- [CVE-2026-10148](https://insights.sbomify.com/CVE-2026-10148/): Cross-site scripting in Booking for Appointments and Events Calendar – Amelia (medium 6.4)
- [CVE-2026-101479](https://insights.sbomify.com/CVE-2026-101479/): Denial of service in Oracle Secure Backup (high 8.6)
- [CVE-2026-101478](https://insights.sbomify.com/CVE-2026-101478/): Other in Oracle Autonomous Health Framework (high 7.8)
- [CVE-2026-101477](https://insights.sbomify.com/CVE-2026-101477/): Other in Oracle Autonomous Health Framework (high 7.8)
- [CVE-2026-101476](https://insights.sbomify.com/CVE-2026-101476/): Other in Siebel Apps - Marketing (medium 4.3)
- [CVE-2026-101475](https://insights.sbomify.com/CVE-2026-101475/): Information disclosure in Primavera Unifier (medium 6.5)
- [CVE-2026-101474](https://insights.sbomify.com/CVE-2026-101474/): Denial of service in Oracle Agile Product Lifecycle Management for Process (medium 5.9)
- [CVE-2026-101473](https://insights.sbomify.com/CVE-2026-101473/): Other in Oracle Agile Product Lifecycle Management for Process (high 8.1)
- [CVE-2026-101472](https://insights.sbomify.com/CVE-2026-101472/): Information disclosure in Oracle Product Lifecycle Analytics (medium 5.5)
- [CVE-2026-101471](https://insights.sbomify.com/CVE-2026-101471/): Denial of service in Oracle Product Lifecycle Analytics (medium 6.1)
- [CVE-2026-101470](https://insights.sbomify.com/CVE-2026-101470/): Other in Oracle Product Lifecycle Analytics (medium 6.0)
- [CVE-2026-101469](https://insights.sbomify.com/CVE-2026-101469/): SQL injection in Oracle Product Lifecycle Analytics (high 7.5)
- [CVE-2026-101468](https://insights.sbomify.com/CVE-2026-101468/): Information disclosure in Siebel CRM Deployment (high 7.5)
- [CVE-2026-101467](https://insights.sbomify.com/CVE-2026-101467/): Missing authorization in Siebel CRM End User (high 7.4)
- [CVE-2026-101466](https://insights.sbomify.com/CVE-2026-101466/): Privilege escalation in Oracle EDI Gateway (high 7.2)
- [CVE-2026-101465](https://insights.sbomify.com/CVE-2026-101465/): Missing authorization in Siebel CRM Deployment (medium 6.3)
- [CVE-2026-101464](https://insights.sbomify.com/CVE-2026-101464/): Missing authorization in Siebel CRM Deployment (high 7.1)
- [CVE-2026-101463](https://insights.sbomify.com/CVE-2026-101463/): Missing authorization in Siebel CRM End User (high 7.5)
- [CVE-2026-101462](https://insights.sbomify.com/CVE-2026-101462/): Missing authorization in Siebel CRM Deployment (medium 5.5)
- [CVE-2026-101461](https://insights.sbomify.com/CVE-2026-101461/): Information disclosure in Siebel CRM Deployment (high 7.5)
- [CVE-2026-101460](https://insights.sbomify.com/CVE-2026-101460/): Missing authorization in Siebel CRM Deployment (high 7.5)
- [CVE-2026-101459](https://insights.sbomify.com/CVE-2026-101459/): Denial of service in Siebel CRM Deployment (high 8.3)
- [CVE-2026-101458](https://insights.sbomify.com/CVE-2026-101458/): Other in Siebel CRM Deployment (high 8.2)
- [CVE-2026-101457](https://insights.sbomify.com/CVE-2026-101457/): Other in Siebel Apps - Life Sciences (high 8.8)
- [CVE-2026-101456](https://insights.sbomify.com/CVE-2026-101456/): Other in Siebel CRM Development (medium 6.0)
- [CVE-2026-101455](https://insights.sbomify.com/CVE-2026-101455/): Other in Siebel CRM Development (medium 6.3)
- [CVE-2026-101454](https://insights.sbomify.com/CVE-2026-101454/): Other in Siebel CRM Development (medium 6.1)
- [CVE-2026-101453](https://insights.sbomify.com/CVE-2026-101453/): Other in Siebel CRM Deployment (medium 6.7)
- [CVE-2026-101452](https://insights.sbomify.com/CVE-2026-101452/): Other in Oracle Autonomous Health Framework (high 7.8)
- [CVE-2026-101451](https://insights.sbomify.com/CVE-2026-101451/): Other in Siebel Life Sciences (high 8.7)
- [CVE-2026-101450](https://insights.sbomify.com/CVE-2026-101450/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 7.1)
- [CVE-2026-101449](https://insights.sbomify.com/CVE-2026-101449/): Information disclosure in Siebel CRM Deployment (low 2.4)
- [CVE-2026-101448](https://insights.sbomify.com/CVE-2026-101448/): Information disclosure in Siebel CRM Deployment (medium 5.3)
- [CVE-2026-101447](https://insights.sbomify.com/CVE-2026-101447/): Other in Siebel CRM Development (high 7.1)
- [CVE-2026-101446](https://insights.sbomify.com/CVE-2026-101446/): Other in Siebel CRM Cloud Applications (critical 9.9)
- [CVE-2026-101445](https://insights.sbomify.com/CVE-2026-101445/): Other in Siebel CRM Cloud Applications (low 3.6)
- [CVE-2026-101444](https://insights.sbomify.com/CVE-2026-101444/): Information disclosure in Siebel CRM Cloud Applications (medium 5.5)
- [CVE-2026-101443](https://insights.sbomify.com/CVE-2026-101443/): Other in Siebel CRM Cloud Applications (medium 6.5)
- [CVE-2026-101442](https://insights.sbomify.com/CVE-2026-101442/): Information disclosure in Siebel CRM Cloud Applications (low 3.1)
- [CVE-2026-101441](https://insights.sbomify.com/CVE-2026-101441/): Information disclosure in Siebel CRM Cloud Applications (medium 5.3)
- [CVE-2026-101440](https://insights.sbomify.com/CVE-2026-101440/): Other in Siebel CRM Cloud Applications (medium 5.9)
- [CVE-2026-10144](https://insights.sbomify.com/CVE-2026-10144/): Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling (high 7.1)
- [CVE-2026-101439](https://insights.sbomify.com/CVE-2026-101439/): Other in Siebel CRM Cloud Applications (medium 5.9)
- [CVE-2026-101438](https://insights.sbomify.com/CVE-2026-101438/): Other in Siebel CRM Cloud Applications (high 8.0)
- [CVE-2026-101437](https://insights.sbomify.com/CVE-2026-101437/): Other in Siebel CRM Cloud Applications (medium 6.6)
- [CVE-2026-101436](https://insights.sbomify.com/CVE-2026-101436/): Other in Siebel CRM Cloud Applications (medium 4.1)
- [CVE-2026-101435](https://insights.sbomify.com/CVE-2026-101435/): Other in PeopleSoft Enterprise PeopleTools (medium 6.6)
- [CVE-2026-101434](https://insights.sbomify.com/CVE-2026-101434/): Other in PeopleSoft Enterprise PeopleTools (high 7.6)
- [CVE-2026-101433](https://insights.sbomify.com/CVE-2026-101433/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 5.3)
- [CVE-2026-101432](https://insights.sbomify.com/CVE-2026-101432/): Denial of service in PeopleSoft Enterprise PeopleTools (medium 5.3)
- [CVE-2026-101431](https://insights.sbomify.com/CVE-2026-101431/): Other in PeopleSoft Enterprise PeopleTools (high 8.7)
- [CVE-2026-101430](https://insights.sbomify.com/CVE-2026-101430/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 6.2)
- [CVE-2026-10143](https://insights.sbomify.com/CVE-2026-10143/): kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py (high 8.7)
- [CVE-2026-101429](https://insights.sbomify.com/CVE-2026-101429/): Other in PeopleSoft Enterprise PeopleTools (high 7.0)
- [CVE-2026-101428](https://insights.sbomify.com/CVE-2026-101428/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 7.5)
- [CVE-2026-101427](https://insights.sbomify.com/CVE-2026-101427/): Other in PeopleSoft Enterprise PeopleTools (high 8.1)
- [CVE-2026-101426](https://insights.sbomify.com/CVE-2026-101426/): Other in PeopleSoft Enterprise PeopleTools (medium 6.9)
- [CVE-2026-101425](https://insights.sbomify.com/CVE-2026-101425/): Missing authorization in PeopleSoft Enterprise PeopleTools (low 2.5)
- [CVE-2026-101424](https://insights.sbomify.com/CVE-2026-101424/): Other in PeopleSoft Enterprise PeopleTools (medium 5.8)
- [CVE-2026-101423](https://insights.sbomify.com/CVE-2026-101423/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 4.3)
- [CVE-2026-101422](https://insights.sbomify.com/CVE-2026-101422/): Other in PeopleSoft Enterprise PeopleTools (high 8.1)
- [CVE-2026-101421](https://insights.sbomify.com/CVE-2026-101421/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 7.5)
- [CVE-2026-101420](https://insights.sbomify.com/CVE-2026-101420/): Missing authorization in PeopleSoft Enterprise PeopleTools (critical 9.6)
- [CVE-2026-10142](https://insights.sbomify.com/CVE-2026-10142/): kafka-python prior to 2.3.2 Denial of Service via Protocol Parser Frame Length (high 8.7)
- [CVE-2026-101419](https://insights.sbomify.com/CVE-2026-101419/): Other in PeopleSoft Enterprise PeopleTools (medium 6.5)
- [CVE-2026-101418](https://insights.sbomify.com/CVE-2026-101418/): Other in PeopleSoft Enterprise PeopleTools (medium 6.5)
- [CVE-2026-101417](https://insights.sbomify.com/CVE-2026-101417/): Information disclosure in PeopleSoft Enterprise PeopleTools (low 3.7)
- [CVE-2026-101416](https://insights.sbomify.com/CVE-2026-101416/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 7.5)
- [CVE-2026-101415](https://insights.sbomify.com/CVE-2026-101415/): Denial of service in PeopleSoft Enterprise PeopleTools (low 3.1)
- [CVE-2026-101414](https://insights.sbomify.com/CVE-2026-101414/): Other in PeopleSoft Enterprise PeopleTools (low 2.9)
- [CVE-2026-101413](https://insights.sbomify.com/CVE-2026-101413/): Denial of service in PeopleSoft Enterprise PeopleTools (medium 5.3)
- [CVE-2026-101412](https://insights.sbomify.com/CVE-2026-101412/): Denial of service in PeopleSoft Enterprise PeopleTools (medium 5.8)
- [CVE-2026-101411](https://insights.sbomify.com/CVE-2026-101411/): Missing authorization in PeopleSoft Enterprise PeopleTools (high 8.1)
- [CVE-2026-101410](https://insights.sbomify.com/CVE-2026-101410/): Other in PeopleSoft Enterprise PeopleTools (high 7.5)
- [CVE-2026-10141](https://insights.sbomify.com/CVE-2026-10141/): Security feature bypass in Totolink (critical 9.1)
- [CVE-2026-101409](https://insights.sbomify.com/CVE-2026-101409/): Other in PeopleSoft Enterprise PeopleTools (high 7.5)
- [CVE-2026-101408](https://insights.sbomify.com/CVE-2026-101408/): Cross-site scripting in Siebel Apps - Marketing (medium 6.1)
- [CVE-2026-101407](https://insights.sbomify.com/CVE-2026-101407/): Denial of service in PeopleSoft Enterprise PeopleTools (medium 5.5)
- [CVE-2026-101406](https://insights.sbomify.com/CVE-2026-101406/): Information disclosure in Siebel Apps - Marketing (low 3.7)
- [CVE-2026-101405](https://insights.sbomify.com/CVE-2026-101405/): Other in Siebel Apps - Marketing (medium 4.8)
- [CVE-2026-101404](https://insights.sbomify.com/CVE-2026-101404/): Missing authorization in Siebel Apps - Marketing (low 3.9)
- [CVE-2026-101403](https://insights.sbomify.com/CVE-2026-101403/): Open redirect in Siebel Apps - Marketing (medium 5.9)
- [CVE-2026-101402](https://insights.sbomify.com/CVE-2026-101402/): Denial of service in Siebel Apps - Marketing (low 3.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/995/