Live feed · cooey

2026-08-18 NVD CVE

CVE-2026-15748: The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload CRITICAL

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in...

arbitrary-files-uploadcve-2026-15748executable-filefile-validationfiles-uploadforminatormime-typenvd-cve

2026-08-18 NVD CVE

CVE-2026-70669: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-70669cvss-31httpintegritynetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-75094: A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_ CRITICAL

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component CGI Interface. This manipulation of the argument...

attack-surfacecf-n1-scgi-bincgi-interfacecomfastcve-2026-75094networks-devicesnvd-cve

2026-08-18 NVD CVE

CVE-2026-70668: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

confidentiality-impactcve-2026-70668cvss-31data-compromiseintegrity-impactnvd-cveoracleoracle-fusion-middleware

2026-08-18 NVD CVE

CVE-2026-70730: Vulnerability in the Oracle Hyperion Profitability and Cost Management product o CRITICAL

Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability...

confidentiality-impactcritical-datacve-2026-70730cvss-31data-compromisehttphyperion-profitability-and-costs-managementintegrity-impact

2026-08-18 NVD CVE

CVE-2026-70905: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( CRITICAL

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...

2026-08-18 NVD CVE

CVE-2026-62635: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-62635cvss-31httpintegritynetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-62637: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

2026-08-18 NVD CVE

CVE-2026-62608: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability...

2026-08-18 NVD CVE

CVE-2026-70921: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype CRITICAL

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows...

2026-08-18 NVD CVE

CVE-2026-62638: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

2026-08-18 NVD CVE

CVE-2026-61241: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa CRITICAL

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...

availability-impactcompromiseconfidentiality-impactcve-2026-61241cvss-100cvss-31integrity-impactldap

2026-08-18 NVD CVE

CVE-2026-62639: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availability-impactcompromiseconfidentiality-impactcorbacve-2026-62639cvss-31cvss-98integrity-impact

2026-08-18 NVD CVE

CVE-2026-71152: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp CRITICAL

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker...

2026-08-18 NVD CVE

CVE-2026-71065: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp CRITICAL

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated...

2026-08-18 NVD CVE

CVE-2026-70978: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

2026-08-18 NVD CVE

CVE-2026-62629: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

cve-2026-62629data-compromisedata-creationdata-deletiondata-modificationdata-readdosdose-attack

2026-08-18 NVD CVE

CVE-2026-70979: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

2026-08-18 NVD CVE

CVE-2026-62630: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-62630cvss-31integritynetwork-accessnvd-cveoracle-fusion-middleware

2026-08-18 NVD CVE

CVE-2026-70977: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

availability-impactcve-2026-70977cvss-31data-creationdata-deletiondata-modificationdosdose-attack

2026-08-18 NVD CVE

CVE-2026-71014: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0....

2026-08-18 NVD CVE

CVE-2026-71015: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0....

2026-08-18 NVD CVE

CVE-2026-62632: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-62632cvss-31httpintegritynetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-62633: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-62633cvss-31httpintegritynetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-70880: Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora CRITICAL

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable...

2026-08-18 NVD CVE

CVE-2026-70873: Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora CRITICAL

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable...

2026-08-18 NVD CVE

CVE-2026-70876: Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora CRITICAL

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable...

2026-08-18 NVD CVE

CVE-2026-70976: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

availability-impactcontent-acquisition-systemscve-2026-70976cvss-31data-creationdata-deletiondata-modificationdos

2026-08-18 NVD CVE

CVE-2026-71036: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily...

2026-08-18 NVD CVE

CVE-2026-70854: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype CRITICAL

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows...

2026-08-18 NVD CVE

CVE-2026-62622: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability...

availability-impactconfidentiality-impactcve-2026-62622cvss-31iiopintegrity-impactnetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-60990: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion CRITICAL

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...

cve-2026-60990cvss-31cvss-99network-securitynvd-cveoracleoracle-fusionoracle-identity-manager-connector

2026-08-18 NVD CVE

CVE-2026-70817: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype CRITICAL

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows...

2026-08-18 NVD CVE

CVE-2026-70855: Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (co CRITICAL

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows...

2026-08-18 NVD CVE

CVE-2026-62617: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability...

availability-impactconfidentiality-impactcve-2026-62617cvss-31cvss-98integrity-impactnetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-62614: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-62614cvss-31httpintegritynetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-60977: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable...

availability-impactconfidentiality-impactcve-2026-60977cvss-31integrity-impactnetwork-accessnvd-cveoracle

2026-08-18 NVD CVE

CVE-2026-70846: Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (comp CRITICAL

Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows low...

2026-08-18 NVD CVE

CVE-2026-62618: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability...

confidentiality-impactcve-2026-62618cvss-31data-compromisehttpintegrity-impactnetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-62541: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle CRITICAL

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable...