Live feed · cooey

2026-07-22 NVD CVE

CVE-2026-60372: Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion CRITICAL

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...

availabilitybasis-score-98centralizes-thirdparty-jarconfidentialitycvss-31httpimpactintegrity

2026-07-22 NVD CVE

CVE-2026-16232: An authentication bypass vulnerability in the Check Point SmartConsole login pro CRITICAL ◈ 2 sources · orig. NVD CVE

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative...

administrative-privilegescheck-pointcisa-kevcve-2026-16232improper-authentication-vulnerabilityremote-attacks

2026-07-22 NVD CVE

CVE-2026-50252: In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is rand CRITICAL

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies...

cve-2026-50252dns-caches-poisoning-attacksdns-caches-poisoningsdns-transactionentropyload-balancing-policiesmalicious-actorsnvd-cve

2026-07-22 NVD CVE

CVE-2026-65590: n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restri CRITICAL

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macOS). Shell commands executed by the tool...

computer-use-packagecve-2026-65590cybersecurityfilesystem-accessesincident-responselinuxmacon8n

2026-07-21 NVD CVE

CVE-2026-60227: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60227cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60228: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60228cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60229: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60229cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60226: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60226cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-62549: Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (compon CRITICAL

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged...

2026-07-21 NVD CVE

CVE-2026-60221: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60221cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-62546: Vulnerability in the Oracle Applications Framework product of Oracle E-Business CRITICAL

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows high...

2026-07-21 NVD CVE

CVE-2026-61242: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product CRITICAL

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low...

2026-07-21 NVD CVE

CVE-2026-61244: Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product o CRITICAL

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft (component: Manufacturing). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-61245: Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of O CRITICAL

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-60224: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60224cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-61237: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product CRITICAL

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-61238: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product CRITICAL

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-61235: Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland produc CRITICAL

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60225: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60225cvss-31data-compromisehttpintegrity

2026-07-21 NVD CVE

CVE-2026-60230: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60230cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-61239: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product CRITICAL

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-61233: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of CRITICAL

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-61156: Vulnerability in the Oracle Commerce Guided Search Platform Services product of CRITICAL

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-61161: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0....

2026-07-21 NVD CVE

CVE-2026-61174: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply CRITICAL

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-60216: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60216cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-61146: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

2026-07-21 NVD CVE

CVE-2026-61171: Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: CRITICAL

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with...

2026-07-21 NVD CVE

CVE-2026-61175: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply CRITICAL

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-60217: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60217cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-61131: Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon CRITICAL

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-60632: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-61140: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-61167: Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: CRITICAL

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with...

2026-07-21 NVD CVE

CVE-2026-61223: Vulnerability in the Oracle Communications Converged Application Server product CRITICAL

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit...

2026-07-21 NVD CVE

CVE-2026-60644: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60606: Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product CRITICAL

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects). The supported version that is affected is 9.2. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60719: Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: CRITICAL

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-60627: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards CRITICAL

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). The supported version that is affected is 9.2.26.3. Easily exploitable vulnerability allows low...

2026-07-21 NVD CVE

CVE-2026-13439: The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unaut CRITICAL

The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow...

administrators-accesscve-2026-13439cybersecuritydata-exposureeasy-form-buildernonce-refreshesnvd-cvepassword-reset