Live feed · cooey

2026-07-21 NVD CVE

CVE-2026-60663: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-61100: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60631: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-65057: Keep (commit 91c75e0) contains a server-side request forgery vulnerability that CRITICAL

Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the...

cloud-credentialscloud-metadatacve-2026-65057cybersecuritydefense-industrial-basedfar-252-204-7012healthcheck-endpointhttps-requests

2026-07-21 NVD CVE

CVE-2026-35290: Vulnerability in Oracle Application Testing Suite. The supported version that CRITICAL

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise...

applications-testing-suiteavailabilityconfidentialitycve-2026-35290cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60644: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60568: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-8986: Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command CRITICAL

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can supply a crafted diagnostics URL that...

2026-07-21 NVD CVE

CVE-2026-60566: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-61145: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

2026-07-21 NVD CVE

CVE-2026-61155: Vulnerability in the Oracle Commerce Guided Search Platform Services product of CRITICAL

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-60649: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60567: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-46876: Vulnerability in Oracle Application Testing Suite. The supported version that CRITICAL

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to...

applications-testing-suiteavailabilityconfidentialitycve-2026-46876cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60547: Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middl CRITICAL

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60542: Vulnerability in the Oracle Business Process Management Suite product of Oracle CRITICAL

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60565: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-61233: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of CRITICAL

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-60541: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60551: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-46924: Vulnerability in Oracle Application Testing Suite. The supported version that CRITICAL

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise...

applications-testing-suiteavailabilitycompromiseconfidentialitycve-2026-46924cvss-31integritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60202: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60202cvss-31iiop-protocolintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-61161: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0....

2026-07-21 NVD CVE

CVE-2026-60524: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-64825: Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that CRITICAL

Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem by uploading a crafted backup archive...

arbitrary-file-writebackup-archivecve-2026-64825cybersecuritydata-integrityfile-writefilesystem-accesseshome-assistant

2026-07-21 NVD CVE

CVE-2026-60457: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60458: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-28307: SolarWinds Serv-U is affected by a privilege escalation vulnerability that allow CRITICAL

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.

administrator-privilegescve-2026-28307cybersecurityincident-responsenetwork-securitynvd-cvepatch-managementprivileges-escalation

2026-07-21 NVD CVE

CVE-2026-28308: SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln CRITICAL

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments.

cve-2026-28308cybersecuritydomain-administratoridorincident-responsenvd-cvepatch-managementremote-code-execution

2026-07-21 NVD CVE

CVE-2026-60460: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60456: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60532: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion CRITICAL

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily...

2026-07-21 NVD CVE

CVE-2026-60445: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60447: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60446: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60531: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion CRITICAL

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-28306: SolarWinds Serv-U is affected by a privilege escalation vulnerability that allow CRITICAL

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments.

cve-2026-28306cybersecuritydomain-administratornvd-cvepatch-managementprivileges-escalationrisk-managementserv-u

2026-07-21 NVD CVE

CVE-2026-28309: SolarWinds Serv-U is affected by a broken access control vulnerability that allo CRITICAL

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments.

broken-access-controlcve-2026-28309cybersecuritydfar-252-204-7012domain-administratorincident-responsenist-800-171nvd-cve

2026-07-21 NVD CVE

CVE-2026-60435: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-60438: Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (com CRITICAL

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows...