Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2026

7,963 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 40 of 80

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 7.9No exploitEPSS 0%

    oracle corporation · siebel crm cloud applicationsSep 15, 2026

  • Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle banking branchSep 15, 2026

  • Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).

    HighCVSS 8.0No exploitEPSS 0%

    oracle corporation · oracle banking corporate lendingSep 15, 2026

  • Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

    HighCVSS 7.2No exploitEPSS 0%

    oracle corporation · oracle marketingSep 15, 2026

  • Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

    HighCVSS 8.5No exploitEPSS 0%

    oracle corporation · oracle marketingSep 15, 2026

  • Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle marketingSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 8.2No exploitEPSS 0%

    oracle · siebel crmSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · siebel crm cloud applicationsSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 8.2No exploitEPSS 0%

    oracle corporation · siebel crm cloud applicationsSep 15, 2026

  • Vulnerability in the RDBMS component of Oracle Database Server.

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle database serverSep 15, 2026

  • Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · oracle alertSep 15, 2026

  • Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle spares managementSep 15, 2026

  • Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.6No exploitEPSS 0%

    oracle corporation · oracle field serviceSep 15, 2026

  • Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle field serviceSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    HighCVSS 8.6No exploitEPSS 0%

    oracle · formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    HighCVSS 7.9No exploitEPSS 0%

    oracle corporation · oracle formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle · formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · oracle formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    HighCVSS 7.4No exploitEPSS 0%

    oracle corporation · oracle formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle corporation · oracle formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 9.0No exploitEPSS 0%

    oracle corporation · oracle formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    HighCVSS 7.5No exploitEPSS 0%

    oracle corporation · oracle formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle corporation · oracle formsSep 15, 2026

  • Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · formsSep 15, 2026

  • Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

    HighCVSS 7.5No exploitEPSS 0%

    oracle corporation · oracle marketingSep 15, 2026

  • Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle partner managementSep 15, 2026

  • Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.2No exploitEPSS 0%

    oracle corporation · oracle lease and finance managementSep 15, 2026

  • Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle qualitySep 15, 2026

  • Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.5No exploitEPSS 0%

    oracle corporation · oracle qualitySep 15, 2026

  • Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).

    HighCVSS 7.5No exploitEPSS 0%

    oracle corporation · oracle applications managerSep 15, 2026

  • Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle order managementSep 15, 2026

  • Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).

    HighCVSS 7.2No exploitEPSS 0%

    oracle corporation · applications dbaSep 15, 2026

  • Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).

    HighCVSS 7.8No exploitEPSS 0%

    oracle corporation · applications dbaSep 15, 2026

  • Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle user managementSep 15, 2026

  • Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle alertSep 15, 2026

  • Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle marketingSep 15, 2026

  • Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle report managerSep 15, 2026

  • Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle report managerSep 15, 2026

  • Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle sales onlineSep 15, 2026

  • Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle report managerSep 15, 2026

  • Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.6No exploitEPSS 0%

    oracle corporation · oracle sales onlineSep 15, 2026

  • Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle sales offlineSep 15, 2026

  • Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · oracle istoreSep 15, 2026

  • Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle istoreSep 15, 2026

  • Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

    HighCVSS 8.7No exploitEPSS 0%

    oracle corporation · oracle istoreSep 15, 2026

  • Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle spares managementSep 15, 2026

  • Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle spares managementSep 15, 2026

  • Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.0No exploitEPSS 0%

    oracle corporation · oracle spares managementSep 15, 2026

  • Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle field serviceSep 15, 2026

  • Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle proposalsSep 15, 2026

  • Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · siebel apps - life sciencesSep 15, 2026

  • Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).

    HighCVSS 8.7No exploitEPSS 0%

    oracle corporation · siebel apps - customer order managementSep 15, 2026

  • Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).

    HighCVSS 8.7No exploitEPSS 0%

    oracle corporation · siebel apps - customer order managementSep 15, 2026

  • Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · siebel crm end userSep 15, 2026

  • Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory).

    HighCVSS 7.8No exploitEPSS 0%

    oracle corporation · peoplesoft enterprise fin inventory brazilSep 15, 2026

  • Vulnerability in Oracle Application Testing Suite.

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle application testing suiteSep 15, 2026

  • Vulnerability in Oracle Application Testing Suite.

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle corporation · oracle application testing suiteSep 15, 2026

  • Vulnerability in Oracle Application Testing Suite.

    HighCVSS 7.0No exploitEPSS 0%

    oracle corporation · oracle application testing suiteSep 15, 2026

  • Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle corporation · service delivery platformSep 15, 2026

  • Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · oracle project intelligenceSep 15, 2026

  • Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · siebel crm deploymentSep 15, 2026

  • Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · siebel crmSep 15, 2026

  • Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

    HighCVSS 7.3No exploitEPSS 0%

    oracle corporation · siebel crm deploymentSep 15, 2026

  • Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server.

    HighCVSS 7.5No exploitEPSS 0%

    oracle corporation · oracle database serverSep 15, 2026

  • Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).

    HighCVSS 8.0No exploitEPSS 0%

    oracle corporation · oracle applications managerSep 15, 2026

  • Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle applications managerSep 15, 2026

  • Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch).

    HighCVSS 7.8No exploitEPSS 0%

    oracle corporation · applications dbaSep 15, 2026

  • Vulnerability in the RDBMS component of Oracle Database Server.

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle database serverSep 15, 2026

  • Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle project intelligenceSep 15, 2026

  • Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

    HighCVSS 7.4No exploitEPSS 0%

    oracle corporation · oracle application object librarySep 15, 2026

  • Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Attachments / File Upload).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle application object librarySep 15, 2026

  • Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle customer interaction historySep 15, 2026

  • Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: User Interface).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle customer interaction historySep 15, 2026

  • Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle customer interaction historySep 15, 2026

  • Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

    HighCVSS 7.5No exploitEPSS 0%

    oracle corporation · oracle application object librarySep 15, 2026

  • Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle applications managerSep 15, 2026

  • Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · oracle one-to-one fulfillmentSep 15, 2026

  • Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).

    HighCVSS 8.0No exploitEPSS 0%

    oracle corporation · oracle one-to-one fulfillmentSep 15, 2026

  • Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle one-to-one fulfillmentSep 15, 2026

  • Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: OSO Other).

    HighCVSS 8.5No exploitEPSS 0%

    oracle corporation · oracle sales onlineSep 15, 2026

  • Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle one-to-one fulfillmentSep 15, 2026

  • Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Application Framework).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · oracle crm technical foundationSep 15, 2026

  • Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

    HighCVSS 7.2No exploitEPSS 0%

    oracle corporation · oracle common applicationsSep 15, 2026

  • Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · oracle one-to-one fulfillmentSep 15, 2026

  • Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

    HighCVSS 8.0No exploitEPSS 0%

    oracle corporation · oracle application object librarySep 15, 2026

  • Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle common applications calendarSep 15, 2026

  • Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · siebel crm deploymentSep 15, 2026

  • Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces).

    HighCVSS 8.2No exploitEPSS 0%

    oracle corporation · siebel crm developmentSep 15, 2026

  • Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools).

    HighCVSS 7.5No exploitEPSS 0%

    oracle corporation · siebel crm developmentSep 15, 2026

  • Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · siebel crmSep 15, 2026

  • Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

    HighCVSS 7.4No exploitEPSS 0%

    oracle corporation · oracle application object librarySep 15, 2026

  • Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

    HighCVSS 7.3No exploitEPSS 0%

    oracle corporation · oracle common applicationsSep 15, 2026

  • Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle common applications calendarSep 15, 2026

  • Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle common applications calendarSep 15, 2026

  • Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.2No exploitEPSS 0%

    oracle corporation · oracle depot repairSep 15, 2026