Live feed · cooey

2026-07-21 NVD CVE

CVE-2026-60253: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60253cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60287: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-8986: Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command CRITICAL

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can supply a crafted diagnostics URL that...

2026-07-21 NVD CVE

CVE-2026-60388: Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa CRITICAL

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60212: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60212cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60225: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60225cvss-31data-compromisehttpintegrity

2026-07-21 NVD CVE

CVE-2026-61197: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-61178: Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ CRITICAL

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). The supported version that is affected is 6.2.4. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-61175: Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply CRITICAL

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-61183: Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ CRITICAL

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Reporting). The supported version that is affected is 6.2.4. Easily exploitable vulnerability...

2026-07-21 NVD CVE

CVE-2026-60221: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60221cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60202: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60202cvss-31iiop-protocolintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60200: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilitycompromiseconfidentialitycore-componentcve-2026-60200cvss-31integritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60380: Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa CRITICAL

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

2026-07-21 NVD CVE

CVE-2026-60198: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60198cvss-31iiop-protocolintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60173: Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: CRITICAL

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows...

availabilitybi-platform-securitybi-publisherscompromiseconfidentialitycve-2026-60173cvss-31http

2026-07-21 NVD CVE

CVE-2026-61171: Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: CRITICAL

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with...

2026-07-21 NVD CVE

CVE-2026-47056: Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows...

availabilityconfidentialitycve-2026-47056cvss-31data-compromisehttpintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-47040: Vulnerability in the Oracle Net Services component of Oracle Database Server. S CRITICAL

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows...

critical-datacve-2026-47040cvss-31data-availabilitydata-compromisedata-confidentialitydenialdos

2026-07-21 NVD CVE

CVE-2026-47036: Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (compon CRITICAL

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.3. Easily exploitable vulnerability allows...

availabilitycompromiseconfidentialitycrmcve-2026-47036cvss-31development-toolshttp

2026-07-21 NVD CVE

CVE-2026-60275: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilitycompromiseconfidentialitycore-componentcve-2026-60275cvss-31httpintegrity

2026-07-21 NVD CVE

CVE-2026-16441: In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previo CRITICAL

In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.

2026-07-21 NVD CVE

CVE-2026-46994: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E CRITICAL

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable...

agent-next-genavailabilitybase-platformcompromiseconfidentialitycve-2026-46994cvss-31enterprises-managers

2026-07-21 NVD CVE

CVE-2026-46989: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E CRITICAL

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability...

critical-datacve-2026-46989cvss-31data-accessdata-compromisedata-integritydenialenterprises-managers

2026-07-21 NVD CVE

CVE-2026-61161: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0....

2026-07-21 NVD CVE

CVE-2026-60168: Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beve CRITICAL

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable...

critical-datacvss-31data-compromisedata-modificationdenialdoshospitalityhttp

2026-07-21 NVD CVE

CVE-2026-46983: Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Appl CRITICAL

Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 16.0.3. Easily exploitable vulnerability allows...

availabilitycompromiseconfidentialitycve-2026-46983cvss-31httpintegration-busintegrity

2026-07-21 NVD CVE

CVE-2026-60197: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilitycoherenceconfidentialitycore-componentcve-2026-60197cvss-31data-compromiseintegrity

2026-07-21 NVD CVE

CVE-2026-46982: Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Appl CRITICAL

Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 14.1.3.2. Easily exploitable vulnerability allows...

availabilitycompromiseconfidentialitycve-2026-46982cvss-31httpintegration-busintegrity

2026-07-21 NVD CVE

CVE-2026-60199: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilitycompromiseconfidentialitycore-componentcve-2026-60199cvss-31httpintegrity

2026-07-21 NVD CVE

CVE-2026-61156: Vulnerability in the Oracle Commerce Guided Search Platform Services product of CRITICAL

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows...

2026-07-21 NVD CVE

CVE-2026-61167: Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: CRITICAL

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with...

2026-07-21 NVD CVE

CVE-2026-60204: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60204cvss-31iiop-protocolintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60205: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows...

availabilitycompromiseconfidentialitycore-componentcve-2026-60205cvss-31integritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60206: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilitycompromiseconfidentialitycore-componentcve-2026-60206cvss-31integritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60208: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

confidentiality-impactcore-componentcritical-datacve-2026-60208cvss-31cvss-basis-scoredata-compromisedata-modification

2026-07-21 NVD CVE

CVE-2026-60209: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...

availabilityconfidentialitycore-componentcve-2026-60209cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-60210: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows...

availabilityconfidentialitycore-componentcve-2026-60210cvss-31data-compromiseintegritynetwork-access

2026-07-21 NVD CVE

CVE-2026-46924: Vulnerability in Oracle Application Testing Suite. The supported version that CRITICAL

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise...

applications-testing-suiteavailabilitycompromiseconfidentialitycve-2026-46924cvss-31integritynetwork-access

2026-07-21 NVD CVE

CVE-2026-46876: Vulnerability in Oracle Application Testing Suite. The supported version that CRITICAL

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to...

applications-testing-suiteavailabilityconfidentialitycve-2026-46876cvss-31data-compromiseintegritynetwork-access