By publication date

Exploited and new serious CVEs: October 2026

8,751 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 56 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2026-87864No exploit	IMAP APPEND plus CRLF conversion command injectioncurl · curl · CWE-130 pre-auth RCE Command injection	High8.1	—	0.8%	Oct 20, 2026
29Monitor	CVE-2026-87865No exploit	knownhost callback mismatches key as missingcurl · curl · CWE-295 Pre-auth Weak crypto	High7.4	—	0.6%	Oct 20, 2026
36Monitor	CVE-2026-87866No exploit	wolfSSL public-key pinning bypasscurl · curl · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.5%	Oct 20, 2026
32Monitor	CVE-2026-92386No exploit	server-set cookie aborts cookie jar loadcurl · curl · CWE-1284 Pre-auth	High8.1	—	0.8%	Oct 20, 2026
32Monitor	CVE-2026-92387No exploit	never-ending loop via server response omissioncurl · curl · CWE-835 Pre-auth Denial of service	High8.1	—	1.0%	Oct 20, 2026
36Monitor	CVE-2026-92388No exploit	FTP wildcard write callback mixupcurl · curl · CWE-416 Pre-auth Memory safety	Critical9.1	—	0.6%	Oct 20, 2026
32Monitor	CVE-2026-92389No exploit	TFTP direction confusioncurl · curl · CWE-200 Pre-auth Info leak	High8.1	—	0.7%	Oct 20, 2026
30Monitor	CVE-2026-92390No exploit	-J no-clobber guarantee bypassed with 103 early hintscurl · curl · CWE-73 Pre-auth Path traversal	High7.5	—	0.5%	Oct 20, 2026
30Monitor	CVE-2026-92391No exploit	curl_mime_free stack overflow by recursioncurl · curl · CWE-674 Pre-auth Denial of service	High7.5	—	1.1%	Oct 20, 2026
36Monitor	CVE-2026-94265No exploit	Authorization: Negotiate sent to foreign origincurl · curl · CWE-200 Pre-auth Info leak	Critical9.1	—	0.7%	Oct 20, 2026
30Monitor	CVE-2026-94266No exploit	password leak in CURLINFO_EFFECTIVE_URLcurl · curl · CWE-522 Pre-auth Info leak	High7.5	—	0.5%	Oct 20, 2026
36Monitor	CVE-2026-9659No exploit	Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-Xtotolink · totolink · CWE-121 RCE Memory safety	Critical9.1	—	0.7%	Oct 20, 2026
36Monitor	CVE-2026-9660No exploit	Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-Xtotolink · totolink · CWE-121 RCE Memory safety	Critical9.1	—	0.5%	Oct 20, 2026
36Monitor	CVE-2026-9814No exploit	An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2totolink · totolink · CWE-78 RCE Command injection	Critical9.1	—	1.6%	Oct 20, 2026
36Monitor	CVE-2026-9817No exploit	A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-totolink · totolink · CWE-121 RCE Memory safety	Critical9.1	—	0.5%	Oct 20, 2026
36Monitor	CVE-2026-9827No exploit	A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202504totolink · totolink · CWE-22 RCE Path traversal	Critical9.1	—	0.6%	Oct 20, 2026
36Monitor	CVE-2026-9869No exploit	A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0totolink · totolink · CWE-121 RCE Memory safety	Critical9.1	—	0.5%	Oct 20, 2026
30Monitor	CVE-2026-101387No exploit	Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).oracle · capacity · CWE-284 Broken access control (IDOR)	High7.6	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101388No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).oracle · peoplesoft enterprise peopletools · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-101390No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).oracle · peoplesoft enterprise peopletools · CWE-306 Pre-auth Auth bypass	High8.1	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101398No exploit	Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle capacity · CWE-284 Broken access control (IDOR)	High7.6	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101409No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).oracle · peoplesoft enterprise peopletools · CWE-306 Pre-auth Auth bypass	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101410No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).oracle · peoplesoft enterprise peopletools · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-101411No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).oracle · peoplesoft enterprise peopletools · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101416No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin).oracle · peoplesoft enterprise peopletools · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
38Monitor	CVE-2026-101420No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).oracle · peoplesoft enterprise peopletools · CWE-284 Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101421No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).oracle · peoplesoft enterprise peopletools · CWE-306 Pre-auth Auth bypass	High7.5	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-101422No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).oracle · peoplesoft enterprise peopletools · CWE-400 Denial of service	High8.1	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-101427No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).oracle · peoplesoft enterprise peopletools · CWE-400 Pre-auth Denial of service	High8.1	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101428No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).oracle · peoplesoft enterprise peopletools · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101429No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).oracle · peoplesoft enterprise peopletools · CWE-284 Broken access control (IDOR)	High7.0	—	0.1%	Oct 20, 2026
34Monitor	CVE-2026-101431No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework).oracle · peoplesoft enterprise peopletools · CWE-284 Broken access control (IDOR)	High8.7	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101434No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server).oracle · peoplesoft enterprise peopletools · CWE-400 Pre-auth Denial of service	High7.6	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-101438No exploit	Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).oracle · siebel crm · CWE-306 Pre-auth Auth bypass	High8.0	—	0.2%	Oct 20, 2026
39Monitor	CVE-2026-101446No exploit	Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).oracle · siebel crm · CWE-20	Critical9.9	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-101447No exploit	Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow).oracle corporation · siebel crm development · CWE-352 CSRF	High7.1	—	0.1%	Oct 20, 2026
28Monitor	CVE-2026-101450No exploit	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).oracle · peoplesoft enterprise peopletools · CWE-306 Pre-auth Auth bypass	High7.1	—	0.2%	Oct 20, 2026
34Monitor	CVE-2026-101451No exploit	Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI).oracle · siebel crm · CWE-284 Broken access control (IDOR)	High8.7	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-101452No exploit	Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay).oracle corporation · oracle autonomous health framework · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
35Monitor	CVE-2026-101457No exploit	Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing).oracle · siebel crm · CWE-89 SQL injection	High8.8	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-101458No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Oct 20, 2026
33Monitor	CVE-2026-101459No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-400 Denial of service	High8.3	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101460No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101461No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101463No exploit	Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI).oracle · siebel crm · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-101464No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.1	—	0.1%	Oct 20, 2026
28Monitor	CVE-2026-101466No exploit	Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).oracle corporation · oracle edi gateway · CWE-269	High7.2	—	0.4%	Oct 20, 2026
29Monitor	CVE-2026-101467No exploit	Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework).oracle · siebel crm · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101468No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway).oracle · siebel crm · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101469No exploit	Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).oracle corporation · oracle product lifecycle analytics · CWE-89 SQL injection	High7.5	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-101473No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.3%	Oct 20, 2026
31Monitor	CVE-2026-101477No exploit	Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).oracle corporation · oracle autonomous health framework · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-101478No exploit	Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).oracle corporation · oracle autonomous health framework · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
34Monitor	CVE-2026-101479No exploit	Vulnerability in Oracle Secure Backup (component: Backup and Restore).oracle corporation · oracle secure backup · CWE-400 Pre-auth Denial of service	High8.6	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-101481No exploit	Vulnerability in Oracle Secure Backup (component: Device Management and Support).oracle corporation · oracle secure backup · CWE-284 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-101482No exploit	Vulnerability in Oracle Secure Backup (component: Device Management and Support).oracle corporation · oracle secure backup · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
39Monitor	CVE-2026-101484No exploit	Vulnerability in Oracle Secure Backup (component: Backup and Restore).oracle corporation · oracle secure backup · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.5%	Oct 20, 2026
30Monitor	CVE-2026-101494No exploit	Vulnerability in Oracle REST Data Services (component: Core).oracle corporation · oracle rest data services · CWE-200 Info leak	High7.7	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-101495No exploit	Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager).oracle · siebel crm · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-101498No exploit	Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).oracle corporation · oracle trusted answer search · CWE-89 Pre-auth SQL injection	High8.1	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-101499No exploit	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).oracle · webcenter sites · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.5%	Oct 20, 2026
39Monitor	CVE-2026-101501No exploit	Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).oracle corporation · oracle trusted answer search · CWE-400 Denial of service	Critical9.9	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-101503No exploit	Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).oracle corporation · oracle trusted answer search · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101504No exploit	Vulnerability in Oracle Trusted Answer Search (component: Application expert UI).oracle corporation · oracle trusted answer search · CWE-352 CSRF	High7.6	—	0.1%	Oct 20, 2026
34Monitor	CVE-2026-101505No exploit	Vulnerability in Oracle Trusted Answer Search (component: Application expert UI).oracle corporation · oracle trusted answer search · CWE-284 Broken access control (IDOR)	High8.7	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101506No exploit	Vulnerability in Oracle Trusted Answer Search (component: Application expert UI).oracle corporation · oracle trusted answer search · CWE-200 Info leak	High7.7	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101508No exploit	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).oracle · siebel crm · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Oct 20, 2026
35Monitor	CVE-2026-101518No exploit	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).oracle corporation · oracle enterprise manager base platform · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-101519No exploit	Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).oracle corporation · oracle edi gateway · CWE-269	High7.2	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101520No exploit	Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Instaloracle corporation · oracle global lifecycle management nextgen oui framework · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Oct 20, 2026
39Monitor	CVE-2026-101521No exploit	Vulnerability in Oracle APEX (component: General).oracle corporation · oracle apex · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.5%	Oct 20, 2026
35Monitor	CVE-2026-101525No exploit	Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management).oracle corporation · oracle enterprise manager for siebel · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-101526No exploit	Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management).oracle corporation · oracle enterprise manager for siebel · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
31Monitor	CVE-2026-101527No exploit	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install).oracle corporation · oracle enterprise manager base platform · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
39Monitor	CVE-2026-101528No exploit	Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management).oracle corporation · oracle enterprise manager for oracle database · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-101529No exploit	Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management).oracle corporation · oracle enterprise manager for oracle database · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101531No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).oracle corporation · oracle business intelligence enterprise edition · CWE-200 Pre-auth Info leak	High7.5	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101532No exploit	Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).oracle corporation · oracle edi gateway · CWE-269	High7.2	—	0.4%	Oct 20, 2026
34Monitor	CVE-2026-101534No exploit	Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI).oracle corporation · oracle edi gateway · CWE-284 Broken access control (IDOR)	High8.5	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-101535No exploit	Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API).oracle corporation · oracle sales foundation · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101536No exploit	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance).oracle corporation · oracle cost management · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
39Monitor	CVE-2026-101537No exploit	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).oracle · solaris · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101540No exploit	Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).oracle · capacity · CWE-200 Info leak	High7.7	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101541No exploit	Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).oracle · capacity · CWE-200 Info leak	High7.7	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-101542No exploit	Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).oracle · capacity · CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101543No exploit	Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).oracle · capacity · CWE-284 Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
28Monitor	CVE-2026-101544No exploit	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).oracle · payroll · CWE-269 Local privilege escalation	High7.0	—	0.1%	Oct 20, 2026
28Monitor	CVE-2026-101545No exploit	Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle inventory management · CWE-269 Local privilege escalation	High7.0	—	0.0%	Oct 20, 2026
30Monitor	CVE-2026-101546No exploit	Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle materials requirement planning · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101548No exploit	Vulnerability in Oracle Application Testing Suite (component: OpenScript).oracle corporation · oracle application testing suite · CWE-269 Local privilege escalation	High7.0	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-101549No exploit	Vulnerability in Oracle Application Testing Suite (component: OpenScript).oracle corporation · oracle application testing suite · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-101551No exploit	Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).oracle · applications manager · CWE-306 Pre-auth Auth bypass	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101552No exploit	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields).oracle corporation · oracle application object library · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101554No exploit	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).oracle · payroll · CWE-284 Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-101555No exploit	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).oracle · payroll · CWE-284 Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-101556No exploit	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).oracle · payroll · CWE-284 Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
35Monitor	CVE-2026-101557No exploit	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).oracle · purchasing · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-101560No exploit	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Commerce Server).oracle corporation · oracle commerce platform · CWE-284 Broken access control (IDOR)	High7.1	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-101562No exploit	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect).oracle corporation · oracle agile plm · CWE-200 Pre-auth Info leak	High7.5	—	0.3%	Oct 20, 2026
31Monitor	CVE-2026-101566No exploit	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).oracle corporation · oracle application object library · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026

CVE-2026-87864
32Monitor
IMAP APPEND plus CRLF conversion command injection
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Command injection
curl · curlOct 20, 2026
CVE-2026-87865
29Monitor
knownhost callback mismatches key as missing
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
curl · curlOct 20, 2026
CVE-2026-87866
36Monitor
wolfSSL public-key pinning bypass
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
curl · curlOct 20, 2026
CVE-2026-92386
32Monitor
server-set cookie aborts cookie jar load
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
curl · curlOct 20, 2026
CVE-2026-92387
32Monitor
never-ending loop via server response omission
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
- Denial of service
curl · curlOct 20, 2026
CVE-2026-92388
36Monitor
FTP wildcard write callback mixup
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Memory safety
curl · curlOct 20, 2026
CVE-2026-92389
32Monitor
TFTP direction confusion
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Info leak
curl · curlOct 20, 2026
CVE-2026-92390
30Monitor
-J no-clobber guarantee bypassed with 103 early hints
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
curl · curlOct 20, 2026
CVE-2026-92391
30Monitor
curl_mime_free stack overflow by recursion
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
curl · curlOct 20, 2026
CVE-2026-94265
36Monitor
Authorization: Negotiate sent to foreign origin
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Info leak
curl · curlOct 20, 2026
CVE-2026-94266
30Monitor
password leak in CURLINFO_EFFECTIVE_URL
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
curl · curlOct 20, 2026
CVE-2026-9659
36Monitor
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- Memory safety
totolink · totolinkOct 20, 2026
CVE-2026-9660
36Monitor
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- Memory safety
totolink · totolinkOct 20, 2026
CVE-2026-9814
36Monitor
An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2
CriticalCVSS 9.1No exploitEPSS 1%
- RCE
- Command injection
totolink · totolinkOct 20, 2026
CVE-2026-9817
36Monitor
A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- Memory safety
totolink · totolinkOct 20, 2026
CVE-2026-9827
36Monitor
A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202504
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- Path traversal
totolink · totolinkOct 20, 2026
CVE-2026-9869
36Monitor
A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- Memory safety
totolink · totolinkOct 20, 2026
CVE-2026-101387
30Monitor
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle · capacityOct 20, 2026
CVE-2026-101388
28Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101390
32Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101398
30Monitor
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle capacityOct 20, 2026
CVE-2026-101409
30Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101410
30Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101411
32Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101416
30Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101420
38Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101421
30Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101422
32Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).
HighCVSS 8.1No exploitEPSS 0%
- Denial of service
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101427
32Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101428
30Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101429
28Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).
HighCVSS 7.0No exploitEPSS 0%
- Broken access control (IDOR)
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101431
34Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework).
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101434
30Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server).
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101438
32Monitor
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).
HighCVSS 8.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · siebel crmOct 20, 2026
CVE-2026-101446
39Monitor
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).
CriticalCVSS 9.9No exploitEPSS 0%
oracle · siebel crmOct 20, 2026
CVE-2026-101447
28Monitor
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow).
HighCVSS 7.1No exploitEPSS 0%
- CSRF
oracle corporation · siebel crm developmentOct 20, 2026
CVE-2026-101450
28Monitor
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · peoplesoft enterprise peopletoolsOct 20, 2026
CVE-2026-101451
34Monitor
Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI).
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle · siebel crmOct 20, 2026
CVE-2026-101452
31Monitor
Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle autonomous health frameworkOct 20, 2026
CVE-2026-101457
35Monitor
Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing).
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
oracle · siebel crmOct 20, 2026
CVE-2026-101458
32Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · siebel crmOct 20, 2026
CVE-2026-101459
33Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 8.3No exploitEPSS 0%
- Denial of service
oracle · siebel crmOct 20, 2026
CVE-2026-101460
30Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · siebel crmOct 20, 2026
CVE-2026-101461
30Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle · siebel crmOct 20, 2026
CVE-2026-101463
30Monitor
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · siebel crmOct 20, 2026
CVE-2026-101464
28Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · siebel crmOct 20, 2026
CVE-2026-101466
28Monitor
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).
HighCVSS 7.2No exploitEPSS 0%
oracle corporation · oracle edi gatewayOct 20, 2026
CVE-2026-101467
29Monitor
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · siebel crmOct 20, 2026
CVE-2026-101468
30Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle · siebel crmOct 20, 2026
CVE-2026-101469
30Monitor
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).
HighCVSS 7.5No exploitEPSS 0%
- SQL injection
oracle corporation · oracle product lifecycle analyticsOct 20, 2026
CVE-2026-101473
32Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-101477
31Monitor
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle autonomous health frameworkOct 20, 2026
CVE-2026-101478
31Monitor
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle autonomous health frameworkOct 20, 2026
CVE-2026-101479
34Monitor
Vulnerability in Oracle Secure Backup (component: Backup and Restore).
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle corporation · oracle secure backupOct 20, 2026
CVE-2026-101481
35Monitor
Vulnerability in Oracle Secure Backup (component: Device Management and Support).
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle secure backupOct 20, 2026
CVE-2026-101482
31Monitor
Vulnerability in Oracle Secure Backup (component: Device Management and Support).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle secure backupOct 20, 2026
CVE-2026-101484
39Monitor
Vulnerability in Oracle Secure Backup (component: Backup and Restore).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle secure backupOct 20, 2026
CVE-2026-101494
30Monitor
Vulnerability in Oracle REST Data Services (component: Core).
HighCVSS 7.7No exploitEPSS 0%
- Info leak
oracle corporation · oracle rest data servicesOct 20, 2026
CVE-2026-101495
35Monitor
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager).
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
oracle · siebel crmOct 20, 2026
CVE-2026-101498
32Monitor
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- SQL injection
oracle corporation · oracle trusted answer searchOct 20, 2026
CVE-2026-101499
39Monitor
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · webcenter sitesOct 20, 2026
CVE-2026-101501
39Monitor
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).
CriticalCVSS 9.9No exploitEPSS 0%
- Denial of service
oracle corporation · oracle trusted answer searchOct 20, 2026
CVE-2026-101503
39Monitor
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle trusted answer searchOct 20, 2026
CVE-2026-101504
30Monitor
Vulnerability in Oracle Trusted Answer Search (component: Application expert UI).
HighCVSS 7.6No exploitEPSS 0%
- CSRF
oracle corporation · oracle trusted answer searchOct 20, 2026
CVE-2026-101505
34Monitor
Vulnerability in Oracle Trusted Answer Search (component: Application expert UI).
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle trusted answer searchOct 20, 2026
CVE-2026-101506
30Monitor
Vulnerability in Oracle Trusted Answer Search (component: Application expert UI).
HighCVSS 7.7No exploitEPSS 0%
- Info leak
oracle corporation · oracle trusted answer searchOct 20, 2026
CVE-2026-101508
30Monitor
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · siebel crmOct 20, 2026
CVE-2026-101518
35Monitor
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle enterprise manager base platformOct 20, 2026
CVE-2026-101519
28Monitor
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).
HighCVSS 7.2No exploitEPSS 0%
oracle corporation · oracle edi gatewayOct 20, 2026
CVE-2026-101520
30Monitor
Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Instal
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle corporation · oracle global lifecycle management nextgen oui frameworkOct 20, 2026
CVE-2026-101521
39Monitor
Vulnerability in Oracle APEX (component: General).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle apexOct 20, 2026
CVE-2026-101525
35Monitor
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle enterprise manager for siebelOct 20, 2026
CVE-2026-101526
35Monitor
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle enterprise manager for siebelOct 20, 2026
CVE-2026-101527
31Monitor
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle enterprise manager base platformOct 20, 2026
CVE-2026-101528
39Monitor
Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle enterprise manager for oracle databaseOct 20, 2026
CVE-2026-101529
39Monitor
Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle enterprise manager for oracle databaseOct 20, 2026
CVE-2026-101531
30Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle corporation · oracle business intelligence enterprise editionOct 20, 2026
CVE-2026-101532
28Monitor
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).
HighCVSS 7.2No exploitEPSS 0%
oracle corporation · oracle edi gatewayOct 20, 2026
CVE-2026-101534
34Monitor
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI).
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle edi gatewayOct 20, 2026
CVE-2026-101535
30Monitor
Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle sales foundationOct 20, 2026
CVE-2026-101536
30Monitor
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle cost managementOct 20, 2026
CVE-2026-101537
39Monitor
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · solarisOct 20, 2026
CVE-2026-101540
30Monitor
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.7No exploitEPSS 0%
- Info leak
oracle · capacityOct 20, 2026
CVE-2026-101541
30Monitor
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.7No exploitEPSS 0%
- Info leak
oracle · capacityOct 20, 2026
CVE-2026-101542
35Monitor
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · capacityOct 20, 2026
CVE-2026-101543
30Monitor
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · capacityOct 20, 2026
CVE-2026-101544
28Monitor
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
oracle · payrollOct 20, 2026
CVE-2026-101545
28Monitor
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle inventory managementOct 20, 2026
CVE-2026-101546
30Monitor
Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle materials requirement planningOct 20, 2026
CVE-2026-101548
28Monitor
Vulnerability in Oracle Application Testing Suite (component: OpenScript).
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle application testing suiteOct 20, 2026
CVE-2026-101549
31Monitor
Vulnerability in Oracle Application Testing Suite (component: OpenScript).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle application testing suiteOct 20, 2026
CVE-2026-101551
30Monitor
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · applications managerOct 20, 2026
CVE-2026-101552
30Monitor
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle application object libraryOct 20, 2026
CVE-2026-101554
30Monitor
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · payrollOct 20, 2026
CVE-2026-101555
30Monitor
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · payrollOct 20, 2026
CVE-2026-101556
30Monitor
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · payrollOct 20, 2026
CVE-2026-101557
35Monitor
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · purchasingOct 20, 2026
CVE-2026-101560
28Monitor
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Commerce Server).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle commerce platformOct 20, 2026
CVE-2026-101562
30Monitor
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle corporation · oracle agile plmOct 20, 2026
CVE-2026-101566
31Monitor
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle application object libraryOct 20, 2026