Skip to content
COOEY
LIVE FEED
1821 events · 4 sources · newest first
Events in view
1821
all sources
Critical
1821
severity
Active sources
4
collectors
Last sync
2026-08-26 06:00
UTC
All data Vulns · 3576Regulatory · 143News · 392 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1767CISA KEV · 1677CISA advisory · 113DC3 DCISE · 19
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2026-07-21 NVD CVE
CVE-2026-28307: SolarWinds Serv-U is affected by a privilege escalation vulnerability that allow CRITICAL
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.
administrator-privilegescve-2026-28307cybersecurityincident-responsenetwork-securitynvd-cvepatch-managementprivileges-escalation
2026-07-21 NVD CVE
CVE-2026-47036: Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (compon CRITICAL
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.3. Easily exploitable vulnerability allows...
availabilitycompromiseconfidentialitycrmcve-2026-47036cvss-31development-toolshttp
2026-07-21 NVD CVE
CVE-2026-60389: Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa CRITICAL
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60386: Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa CRITICAL
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60446: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-8986: Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command CRITICAL
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can supply a crafted diagnostics URL that...
2026-07-21 NVD CVE
CVE-2026-28309: SolarWinds Serv-U is affected by a broken access control vulnerability that allo CRITICAL
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments.
broken-access-controlcve-2026-28309cybersecuritydfar-252-204-7012domain-administratorincident-responsenist-800-171nvd-cve
2026-07-21 NVD CVE
CVE-2026-60375: Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa CRITICAL
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60384: Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa CRITICAL
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60377: Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa CRITICAL
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-65008: Grav 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Bl CRITICAL
Grav 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Blueprint::dynamicData() (system/src/Grav/Common/Data/Blueprint.php), which passes a Class::method callable string and its arguments...
authenticate-accountsblueprint-dynamicdatacalls-user-func-arraycve-2026-65008form-plugingravgrav-blueprintsgrav-common-data
2026-07-21 NVD CVE
CVE-2026-28302: SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln CRITICAL
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requires group administrator access. The...
cve-2026-28302cybersecuritydfar-252-204-7012groups-administratorsidorincident-responsenist-800-171nvd-cve
2026-07-21 NVD CVE
CVE-2026-60362: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar CRITICAL
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-60358: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( CRITICAL
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60360: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar CRITICAL
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-13439: The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unaut CRITICAL
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow...
administrators-accesscve-2026-13439cybersecuritydata-exposureeasy-form-buildernonce-refreshesnvd-cvepassword-reset
2026-07-21 NVD CVE
CVE-2026-28304: SolarWinds Serv-U is affected by a remote code execution vulnerability that, whe CRITICAL
SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.
cmmccve-2026-28304cybersecuritydfar-252-204-7012incident-responsenist-800-171nvd-cverce
2026-07-21 NVD CVE
CVE-2026-60361: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar CRITICAL
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-65007: The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize A CRITICAL
The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin intercepts the apiKeyGenerate/apiKeyRevoke admin tasks before the account-management ACL...
access-controlaccounts-managementaccounts-takeoverapi-keyapi-permissionsauthenticationauthorizationcve-2026-65007
2026-07-21 NVD CVE
CVE-2026-28305: SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln CRITICAL
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin privileges and read and write access to the home...
cve-2026-28305cybersecuritydata-exposureidorincident-responsenvd-cvepatch-managementremote-code-execution
2026-07-21 NVD CVE
CVE-2026-60299: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-60328: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( CRITICAL
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-28313: SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln CRITICAL
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployments.
accounts-takeoverarbitrary-accessescve-2026-28313cybersecuritydata-exposureidorincident-responsenvd-cve
2026-07-21 NVD CVE
CVE-2026-28310: SolarWinds Serv-U is affected by a privilege escalation vulnerability that allow CRITICAL
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact is lower in Windows deployments.
cve-2026-28310cybersecuritydomain-administratornvd-cvepatch-managementprivileges-escalationrisk-managementserv-u
2026-07-21 NVD CVE
CVE-2026-28308: SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln CRITICAL
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments.
cve-2026-28308cybersecuritydomain-administratoridorincident-responsenvd-cvepatch-managementremote-code-execution
2026-07-21 NVD CVE
CVE-2026-28312: SolarWinds Serv-U is affected by a privilege escalation vulnerability. This woul CRITICAL
SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is lower in Windows deployments.
code-executioncve-2026-28312cybersecuritydefense-industrial-basedfar-252-204-7012incident-responsenist-800-171nvd-cve
2026-07-21 NVD CVE
CVE-2026-28316: SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln CRITICAL
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administrator with the ability to execute commands as the root user. This...
command-executioncve-2026-28316cybersecuritydfar-252-204-7012idorincident-responsenist-800-171nvd-cve
2026-07-21 NVD CVE
CVE-2016-20096: Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated S CRITICAL
Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name parameter in a POST...
authenticationcredentialcves-2016-20096databasedba-privilegeslinknatlogins-endpointsnvd-cve
2026-07-21 NVD CVE
CVE-2026-46876: Vulnerability in Oracle Application Testing Suite. The supported version that CRITICAL
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to...
applications-testing-suiteavailabilityconfidentialitycve-2026-46876cvss-31data-compromiseintegritynetwork-access
2026-07-21 NVD CVE
CVE-2026-64825: Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that CRITICAL
Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem by uploading a crafted backup archive...
arbitrary-file-writebackup-archivecve-2026-64825cybersecuritydata-integrityfile-writefilesystem-accesseshome-assistant
2026-07-21 NVD CVE
CVE-2026-63764: lmdeploy's OpenAI-compatible API server contains a server-side request forgery v CRITICAL
lmdeploy's OpenAI-compatible API server contains a server-side request forgery vulnerability that allows unauthenticated attackers to access internal services and cloud metadata endpoints by supplying a crafted...
api-servercloud-metadatacybersecurityendpoint-securityhttp-302-redirectimages-urlsinstances-metadatainternal-services
2026-07-21 NVD CVE
CVE-2026-28317: SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln CRITICAL
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments.
cve-2026-28317cybersecuritydfar-252-204-7012domain-administratoridorincident-responsenist-800-171nvd-cve
2026-07-21 NVD CVE
CVE-2026-28321: SolarWinds Serv-U is affected by a broken access control vulnerability that coul CRITICAL
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator...
arbitrary-file-readsarbitrary-file-writebroken-access-controlcode-executioncve-2026-28321cybersecuritydfar-252-204-7012domain-administrator
2026-07-21 NVD CVE
CVE-2026-60329: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware CRITICAL
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...
2026-07-21 NVD CVE
CVE-2026-65057: Keep (commit 91c75e0) contains a server-side request forgery vulnerability that CRITICAL
Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the...
cloud-credentialscloud-metadatacve-2026-65057cybersecuritydefense-industrial-basedfar-252-204-7012healthcheck-endpointhttps-requests
2026-07-21 NVD CVE
CVE-2026-35290: Vulnerability in Oracle Application Testing Suite. The supported version that CRITICAL
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise...
applications-testing-suiteavailabilityconfidentialitycve-2026-35290cvss-31data-compromiseintegritynetwork-access
2026-07-21 NVD CVE
CVE-2026-60298: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-60247: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows...
availabilitycompromiseconfidentialitycore-componentcve-2026-60247cvss-31httpintegrity
2026-07-21 NVD CVE
CVE-2026-60355: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( CRITICAL
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60234: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...
availabilityconfidentialitycore-componentcve-2026-60234cvss-31data-compromiseintegritynetwork-access
◀ PREV PAGE 17 / 46 NEXT ▶