By publication date

Exploited and new serious CVEs: October 2026

8,751 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 57 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-101567No exploit	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).oracle corporation · oracle cost management · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101572No exploit	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2).oracle corporation · helidon · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-101579No exploit	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server).oracle corporation · helidon · CWE-200 Pre-auth Info leak	High7.2	—	0.2%	Oct 20, 2026
28Monitor	CVE-2026-101583No exploit	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper).oracle corporation · helidon · CWE-400 Pre-auth Denial of service	High7.0	—	0.2%	Oct 20, 2026
28Monitor	CVE-2026-101585No exploit	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors).oracle corporation · helidon · CWE-200 Pre-auth Info leak	High7.2	—	0.2%	Oct 20, 2026
36Monitor	CVE-2026-101590No exploit	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security).oracle corporation · helidon · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.4%	Oct 20, 2026
33Monitor	CVE-2026-101593No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-400 Denial of service	High8.3	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-101594No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-101596No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Oct 20, 2026
31Monitor	CVE-2026-101598No exploit	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).oracle corporation · oracle vm virtualbox · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-101599No exploit	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).oracle corporation · oracle vm virtualbox · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.5	—	0.1%	Oct 20, 2026
32Monitor	CVE-2026-101602No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Broken access control (IDOR)	High8.0	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101603No exploit	Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).oracle corporation · oracle communications unified inventory management · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101604No exploit	Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).oracle corporation · oracle communications unified inventory management · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
36Monitor	CVE-2026-101634No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle mobile field service · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.5%	Oct 20, 2026
35Monitor	CVE-2026-101635No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
29Monitor	CVE-2026-101636No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).oracle corporation · oracle mobile field service · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
29Monitor	CVE-2026-101638No exploit	Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).oracle corporation · applications dba · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.3	—	0.1%	Oct 20, 2026
32Monitor	CVE-2026-101640No exploit	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).oracle corporation · oracle marketing · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101641No exploit	Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle report manager · CWE-284 Broken access control (IDOR)	High7.6	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101642No exploit	Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle report manager · CWE-284 Broken access control (IDOR)	High7.1	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-101643No exploit	Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle sales online · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101645No exploit	Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).oracle corporation · oracle isetup · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101646No exploit	Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).oracle corporation · oracle isetup · CWE-284 Broken access control (IDOR)	High7.2	—	0.5%	Oct 20, 2026
30Monitor	CVE-2026-101647No exploit	Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).oracle corporation · oracle isetup · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
33Monitor	CVE-2026-101648No exploit	Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).oracle · partner management · CWE-284 Broken access control (IDOR)	High8.4	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101649No exploit	Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).oracle · partner management · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101650No exploit	Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).oracle · partner management · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-101653No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-101654No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-101655No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-101656No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
29Monitor	CVE-2026-101658No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).oracle corporation · oracle mobile field service · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101660No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).oracle corporation · oracle mobile field service · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Oct 20, 2026
29Monitor	CVE-2026-101661No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).oracle corporation · oracle mobile field service · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101662No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-101664No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-101665No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-101672No exploit	Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle call center technology · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.4%	Oct 20, 2026
31Monitor	CVE-2026-101676No exploit	Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues).oracle corporation · oracle concurrent processing · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
17Monitor	CVE-2026-101678Proof of concept	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).oracle corporation · mysql connectors · CWE-284 Pre-auth Broken access control (IDOR) Denial of service	Medium4.3	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101679No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).oracle corporation · mysql server · CWE-284 Pre-auth Broken access control (IDOR) Denial of service	High7.5	—	0.4%	Oct 20, 2026
29Monitor	CVE-2026-101680No exploit	Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).oracle corporation · oracle communications billing and revenue management · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101681No exploit	Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).oracle corporation · applications dba · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.0	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-101682No exploit	Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).oracle corporation · applications dba · CWE-284 Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
28Monitor	CVE-2026-101683No exploit	Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).oracle corporation · applications dba · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.0	—	0.1%	Oct 20, 2026
33Monitor	CVE-2026-101684No exploit	Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle e-business suite integrated soa gateway · CWE-284 Broken access control (IDOR)	High8.3	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-101685No exploit	Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).oracle corporation · oracle e-business suite integrated soa gateway · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-101686No exploit	Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).oracle corporation · oracle e-business suite integrated soa gateway · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101687No exploit	Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).oracle corporation · oracle e-business suite integrated soa gateway · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
34Monitor	CVE-2026-101688No exploit	Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).oracle corporation · oracle e-business suite integrated soa gateway · CWE-284 Pre-auth Broken access control (IDOR)	High8.6	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101689No exploit	Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).oracle corporation · oracle e-business suite integrated soa gateway · CWE-284 Broken access control (IDOR)	High7.7	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-101690No exploit	Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).oracle corporation · oracle e-business suite integrated soa gateway · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-101692No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-101694No exploit	Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).oracle corporation · oracle mobile field service · CWE-284 Broken access control (IDOR)	High7.2	—	0.5%	Oct 20, 2026
30Monitor	CVE-2026-101698No exploit	Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues).oracle corporation · oracle one-to-one fulfillment · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101699No exploit	Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).oracle corporation · oracle one-to-one fulfillment · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-101700No exploit	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).oracle corporation · oracle application object library · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101703No exploit	Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · pasta · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-101704No exploit	Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other).oracle corporation · oracle concurrent processing · CWE-284 Local privilege escalation Broken access control (IDOR)	High8.2	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-101705No exploit	Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary).oracle corporation · oracle common applications · CWE-284 Broken access control (IDOR)	High7.7	—	0.3%	Oct 20, 2026
29Monitor	CVE-2026-101707No exploit	Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues).oracle corporation · oracle concurrent processing · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101708No exploit	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).oracle · payroll · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101712No exploit	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).oracle · payroll · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101719No exploit	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).oracle corporation · oracle agile plm · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101735No exploit	Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control).oracle corporation · primavera unifier · CWE-284 Broken access control (IDOR)	High7.1	—	0.2%	Oct 20, 2026
29Monitor	CVE-2026-101736No exploit	Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core).oracle corporation · primavera unifier · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101739No exploit	Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interfaceoracle corporation · oracle agile engineering data management · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.0	—	0.1%	Oct 20, 2026
35Monitor	CVE-2026-101742No exploit	Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).oracle · applications manager · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
33Monitor	CVE-2026-101744No exploit	Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interfaceoracle corporation · oracle agile engineering data management · CWE-284 Broken access control (IDOR)	High8.4	—	0.3%	Oct 20, 2026
29Monitor	CVE-2026-101746No exploit	Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install).oracle corporation · oracle agile engineering data management · CWE-284 Pre-auth Broken access control (IDOR)	High7.3	—	0.2%	Oct 20, 2026
31Monitor	CVE-2026-101757No exploit	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).oracle corporation · oracle application object library · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
32Monitor	CVE-2026-101758No exploit	Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).oracle corporation · oracle communications billing and revenue management · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101759No exploit	Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).oracle · communications billing and revenue management · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-101763No exploit	Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deploymenoracle · communications billing and revenue management elastic charging engine · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.5%	Oct 20, 2026
36Monitor	CVE-2026-101765No exploit	Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).oracle · communications billing and revenue management · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.4%	Oct 20, 2026
39Monitor	CVE-2026-101767Proof of concept	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).oracle corporation · oracle application object library · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.6%	Oct 20, 2026
32Monitor	CVE-2026-101768No exploit	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).oracle corporation · mysql connectors · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-101769No exploit	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).oracle corporation · mysql cluster · CWE-284 Pre-auth Broken access control (IDOR)	High7.0	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-101770No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).oracle · mysql cluster · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-101771No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).oracle · mysql cluster · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-101772No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).oracle · mysql cluster · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-101773No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).oracle · mysql cluster · CWE-284 Pre-auth Broken access control (IDOR)	High7.1	—	0.2%	Oct 20, 2026
29Monitor	CVE-2026-101775No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).oracle · mysql cluster · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-101781No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).oracle · mysql cluster · CWE-284 Pre-auth Broken access control (IDOR)	High8.8	—	0.3%	Oct 20, 2026
29Monitor	CVE-2026-101783No exploit	Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).oracle corporation · mysql router · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
33Monitor	CVE-2026-101785No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON).oracle corporation · mysql server · CWE-284 Broken access control (IDOR)	High8.3	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101786No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).oracle corporation · mysql server · CWE-284 Broken access control (IDOR)	High7.2	—	0.4%	Oct 20, 2026
32Monitor	CVE-2026-101791No exploit	Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security).oracle · communications billing and revenue management elastic charging engine · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-101796No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).oracle corporation · mysql server · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-101797No exploit	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump).oracle corporation · mysql server · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
36Monitor	CVE-2026-101808No exploit	Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI).oracle corporation · oracle product workbench · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.4%	Oct 20, 2026
40Plan	CVE-2026-101809No exploit	Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).oracle · workflow · CWE-284 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.5%	Oct 20, 2026
30Monitor	CVE-2026-101810No exploit	Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).oracle corporation · mysql router · CWE-284 Pre-auth Broken access control (IDOR) Denial of service	High7.5	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-101813No exploit	Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).oracle corporation · oracle engineering · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101815No exploit	Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · assets · CWE-284 Broken access control (IDOR)	High7.6	—	0.2%	Oct 20, 2026
28Monitor	CVE-2026-101816No exploit	Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).oracle · product hub · CWE-284 Broken access control (IDOR)	High7.2	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-101818No exploit	Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).oracle · product hub · CWE-284 Broken access control (IDOR)	High7.7	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-101820No exploit	Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN).oracle corporation · oracle general ledger · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
28Monitor	CVE-2026-101822No exploit	Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).oracle corporation · oracle bills of material · CWE-284 Broken access control (IDOR)	High7.2	—	0.2%	Oct 20, 2026

CVE-2026-101567
35Monitor
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle cost managementOct 20, 2026
CVE-2026-101572
30Monitor
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle corporation · helidonOct 20, 2026
CVE-2026-101579
28Monitor
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server).
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Info leak
oracle corporation · helidonOct 20, 2026
CVE-2026-101583
28Monitor
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper).
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle corporation · helidonOct 20, 2026
CVE-2026-101585
28Monitor
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors).
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Info leak
oracle corporation · helidonOct 20, 2026
CVE-2026-101590
36Monitor
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · helidonOct 20, 2026
CVE-2026-101593
33Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.3No exploitEPSS 0%
- Denial of service
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-101594
35Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-101596
35Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-101598
31Monitor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle vm virtualboxOct 20, 2026
CVE-2026-101599
30Monitor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
HighCVSS 7.5No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle vm virtualboxOct 20, 2026
CVE-2026-101602
32Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.0No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-101603
30Monitor
Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle communications unified inventory managementOct 20, 2026
CVE-2026-101604
30Monitor
Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle communications unified inventory managementOct 20, 2026
CVE-2026-101634
36Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101635
35Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101636
29Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101638
29Monitor
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · applications dbaOct 20, 2026
CVE-2026-101640
32Monitor
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle marketingOct 20, 2026
CVE-2026-101641
30Monitor
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle report managerOct 20, 2026
CVE-2026-101642
28Monitor
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle report managerOct 20, 2026
CVE-2026-101643
28Monitor
Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle sales onlineOct 20, 2026
CVE-2026-101645
30Monitor
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle isetupOct 20, 2026
CVE-2026-101646
28Monitor
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle isetupOct 20, 2026
CVE-2026-101647
30Monitor
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle isetupOct 20, 2026
CVE-2026-101648
33Monitor
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.4No exploitEPSS 0%
- Broken access control (IDOR)
oracle · partner managementOct 20, 2026
CVE-2026-101649
28Monitor
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · partner managementOct 20, 2026
CVE-2026-101650
28Monitor
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · partner managementOct 20, 2026
CVE-2026-101653
35Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101654
35Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101655
35Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101656
35Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101658
29Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101660
30Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101661
29Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101662
28Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101664
35Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101665
32Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101672
32Monitor
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle call center technologyOct 20, 2026
CVE-2026-101676
31Monitor
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle concurrent processingOct 20, 2026
CVE-2026-101678
17Monitor
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).
MediumCVSS 4.3Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
- Denial of service
oracle corporation · mysql connectorsOct 20, 2026
CVE-2026-101679
30Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
- Denial of service
oracle corporation · mysql serverOct 20, 2026
CVE-2026-101680
29Monitor
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle communications billing and revenue managementOct 20, 2026
CVE-2026-101681
28Monitor
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · applications dbaOct 20, 2026
CVE-2026-101682
31Monitor
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).
HighCVSS 7.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · applications dbaOct 20, 2026
CVE-2026-101683
28Monitor
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · applications dbaOct 20, 2026
CVE-2026-101684
33Monitor
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle e-business suite integrated soa gatewayOct 20, 2026
CVE-2026-101685
35Monitor
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle e-business suite integrated soa gatewayOct 20, 2026
CVE-2026-101686
35Monitor
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle e-business suite integrated soa gatewayOct 20, 2026
CVE-2026-101687
30Monitor
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle e-business suite integrated soa gatewayOct 20, 2026
CVE-2026-101688
34Monitor
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle e-business suite integrated soa gatewayOct 20, 2026
CVE-2026-101689
30Monitor
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle e-business suite integrated soa gatewayOct 20, 2026
CVE-2026-101690
32Monitor
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle e-business suite integrated soa gatewayOct 20, 2026
CVE-2026-101692
35Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101694
28Monitor
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI).
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle mobile field serviceOct 20, 2026
CVE-2026-101698
30Monitor
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle one-to-one fulfillmentOct 20, 2026
CVE-2026-101699
30Monitor
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle one-to-one fulfillmentOct 20, 2026
CVE-2026-101700
32Monitor
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle application object libraryOct 20, 2026
CVE-2026-101703
30Monitor
Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · pastaOct 20, 2026
CVE-2026-101704
32Monitor
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other).
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle concurrent processingOct 20, 2026
CVE-2026-101705
30Monitor
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary).
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle common applicationsOct 20, 2026
CVE-2026-101707
29Monitor
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle concurrent processingOct 20, 2026
CVE-2026-101708
30Monitor
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · payrollOct 20, 2026
CVE-2026-101712
30Monitor
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · payrollOct 20, 2026
CVE-2026-101719
30Monitor
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle agile plmOct 20, 2026
CVE-2026-101735
28Monitor
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · primavera unifierOct 20, 2026
CVE-2026-101736
29Monitor
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · primavera unifierOct 20, 2026
CVE-2026-101739
28Monitor
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle agile engineering data managementOct 20, 2026
CVE-2026-101742
35Monitor
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · applications managerOct 20, 2026
CVE-2026-101744
33Monitor
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface
HighCVSS 8.4No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle agile engineering data managementOct 20, 2026
CVE-2026-101746
29Monitor
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install).
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle agile engineering data managementOct 20, 2026
CVE-2026-101757
31Monitor
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle application object libraryOct 20, 2026
CVE-2026-101758
32Monitor
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle communications billing and revenue managementOct 20, 2026
CVE-2026-101759
30Monitor
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · communications billing and revenue managementOct 20, 2026
CVE-2026-101763
39Monitor
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deploymen
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · communications billing and revenue management elastic charging engineOct 20, 2026
CVE-2026-101765
36Monitor
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · communications billing and revenue managementOct 20, 2026
CVE-2026-101767
39Monitor
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle application object libraryOct 20, 2026
CVE-2026-101768
32Monitor
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · mysql connectorsOct 20, 2026
CVE-2026-101769
28Monitor
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · mysql clusterOct 20, 2026
CVE-2026-101770
32Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · mysql clusterOct 20, 2026
CVE-2026-101771
32Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · mysql clusterOct 20, 2026
CVE-2026-101772
32Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · mysql clusterOct 20, 2026
CVE-2026-101773
28Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · mysql clusterOct 20, 2026
CVE-2026-101775
29Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · mysql clusterOct 20, 2026
CVE-2026-101781
35Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · mysql clusterOct 20, 2026
CVE-2026-101783
29Monitor
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · mysql routerOct 20, 2026
CVE-2026-101785
33Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON).
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · mysql serverOct 20, 2026
CVE-2026-101786
28Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · mysql serverOct 20, 2026
CVE-2026-101791
32Monitor
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security).
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · communications billing and revenue management elastic charging engineOct 20, 2026
CVE-2026-101796
30Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · mysql serverOct 20, 2026
CVE-2026-101797
30Monitor
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · mysql serverOct 20, 2026
CVE-2026-101808
36Monitor
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle product workbenchOct 20, 2026
CVE-2026-101809
40Plan
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · workflowOct 20, 2026
CVE-2026-101810
30Monitor
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
- Denial of service
oracle corporation · mysql routerOct 20, 2026
CVE-2026-101813
35Monitor
Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle engineeringOct 20, 2026
CVE-2026-101815
30Monitor
Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · assetsOct 20, 2026
CVE-2026-101816
28Monitor
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
oracle · product hubOct 20, 2026
CVE-2026-101818
30Monitor
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle · product hubOct 20, 2026
CVE-2026-101820
30Monitor
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle general ledgerOct 20, 2026
CVE-2026-101822
28Monitor
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle bills of materialOct 20, 2026