UI/content spoofing in Mozilla Firefox for Android (fixed in version 153) lets a remote attacker who lures a user to attacker-controlled content misrepresent trusted interface elements, undermining the integrity of what the user believes they are viewing or interacting with. The flaw is classified as an authentication-bypass-by-spoofing weakness (CWE-290) and requires user interaction. There is no public exploit identified at time of analysis, and EPSS exploitation probability is low (0.13%, 3rd percentile).
OS command injection in the Zyxel AX7501-B1 fiber ONT/CPE allows an authenticated administrator to run arbitrary operating-system commands by injecting shell metacharacters into the "LogServer" field of the device's syslog configuration. All firmware up to and including 5.17(ABPC.7.2)C0 is affected, and successful exploitation yields full command execution on the device (CVSS 7.2, PR:H). There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Argument injection in Moby BuildKit lets a malicious Git source trigger crafted command invocation on the build host when a custom frontend or a client using the raw low-level API enables the non-default git.checkoutbundle=true option during Git source checkout. The flaw affects builds that opt into this experimental checkout behavior rather than standard Dockerfile builds, and a successful attack yields high-impact command execution in the build environment. No public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Data compromise in Oracle Learning Management (Oracle E-Business Suite, Internal Operations component) versions 12.2.3 through 12.2.15 allows a low-privileged, network-authenticated attacker to read, create, delete, or modify all data accessible to the application after luring a victim into interacting. Rated CVSS 3.1 7.3 (High) with full confidentiality and integrity impact but no availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the required user interaction moderates raw exploitability.
Unauthorized data access and partial denial of service in Oracle E-Business Suite's Document Management and Collaboration module (Attachments component) allows a remote unauthenticated attacker to read, insert, update, or delete a subset of application data over HTTP. Affecting supported EBS releases 12.2.3 through 12.2.15, the flaw is rated CVSS 7.3 and is described by Oracle as easily exploitable, requiring no authentication or user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the low-complexity, unauthenticated network vector makes it a meaningful patching priority in a product family that has been a repeated target of mass-exploitation campaigns.
Unauthorized data manipulation in Oracle HCM Configuration Workbench (part of Oracle E-Business Suite, Spreadsheet Loading component) lets a remote unauthenticated attacker reach the application over HTTP and perform unauthorized update, insert, delete and limited read operations, plus trigger a partial denial of service. All EBS releases from 12.2.3 through 12.2.15 are affected. Rated CVSS 3.1 7.3; no public exploit identified at time of analysis and it is not listed in CISA KEV, but the pre-authentication network reach makes it a meaningful patch priority for exposed EBS deployments.
Unauthenticated data tampering and partial denial of service in Oracle Commerce Platform 11.4.0 (Dynamo Application Framework) allows a remote attacker to reach the platform over HTTP and, without any credentials, perform unauthorized insert/update/delete on some accessible data, read a subset of accessible data, and partially disrupt availability. Oracle rates it easily exploitable with a CVSS 3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N). There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so no active exploitation is confirmed.
Unauthorized data access and partial denial of service in Oracle E-Business Suite's Oracle Workflow component (Workflow Notification Mailer), versions 12.2.3 through 12.2.15, lets a remote unauthenticated attacker read a subset of Workflow data, perform limited update/insert/delete operations, and partially disrupt the service over HTTP. Oracle rates it CVSS 3.1 7.3 and flags it as 'easily exploitable' with no authentication required. No public exploit is identified at time of analysis and it is not listed in CISA KEV, though its low-friction network vector warrants prompt patching in the July 2026 Critical Patch Update.
Unauthorized data access and partial denial of service in Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1) allows a remote, unauthenticated attacker to reach the Enterprise Config Management component over HTTP and read, insert, update, or delete a subset of EM-accessible data. Oracle rates it CVSS 3.1 7.3 and describes it as 'easily exploitable' with no authentication or user interaction, so it is a high-priority patch for internet- or intranet-reachable EM consoles. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Memory disclosure and denial-of-service in Apache Fory's Rust deserialization path (versions 0.13.0 through 1.3.0) let remote attackers submit a crafted Fory-serialized payload that triggers a use-after-free, causing undefined behavior, process crashes, or leakage of adjacent process memory. The flaw affects any service that deserializes untrusted Fory data using the Rust implementation, and Apache has published a fixed release (1.4.0). There is no public exploit identified at time of analysis and EPSS exploitation probability is low (0.18%, 7th percentile), but the network-reachable, unauthenticated attack surface makes it a meaningful hardening priority for exposed services.
Privilege-boundary compromise in Oracle Communications Pricing Design Center 15.0.0.0.0 through 15.2.0.0.0 (On-premise Deployment) lets a low-privileged attacker who already has a logon to the host infrastructure read all data accessible to the product and modify a subset of it, with a scope change that can significantly affect additional products. Oracle rates it CVSS 3.1 7.3 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) and describes it as easily exploitable. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Stack-based buffer overflow in libssh's SFTP server allows a connected client to crash the server or potentially execute code by placing files with overlong names into a directory the server subsequently lists. The flaw lives in how libssh builds the SFTP 'longname' field, concatenating attacker-influenced filenames into a fixed-size stack buffer without adequate bounds checking. There is no public exploit identified at time of analysis and EPSS is very low (0.10%), but the memory-corruption nature (CWE-121) and libssh's broad deployment make it worth prioritized patching.
Arbitrary file upload in the MapSVG WordPress plugin (all versions through 8.14.0) lets authenticated Administrator-level users bypass file-type validation in the SVGFile constructor and upload arbitrary files, potentially achieving remote code execution on the host. The flaw stems from an incorrect conditional that skips validation entirely rather than enforcing it. Reported by Wordfence with a CVSS 3.1 base score of 7.2; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Reflected cross-site scripting in the DHIS2 OpenAPI HTML documentation endpoint allows an attacker to execute arbitrary JavaScript in a victim's browser within the DHIS2 origin by luring an authenticated user to a crafted URL. The endpoint echoes the `scope` query parameter into the generated HTML page without sufficient sanitization (CWE-79), affecting DHIS2 core versions 2.42 and 2.43 prior to the 2026-06-09 security releases and the 2.44 development branch. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but successful exploitation can hijack the victim's DHIS2 session and act with their privileges.
Full compromise of Oracle Process Manufacturing Logistics (Internal Operations component of Oracle E-Business Suite) is possible for a high-privileged, authenticated attacker sending crafted HTTP requests, per Oracle's July 2026 Critical Patch Update. Successful attacks yield complete takeover of the module with high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.2). No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Full compromise of the Oracle Public Sector Payroll module (Internal Operations component) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is possible for a high-privileged attacker with network HTTP access, yielding complete takeover of the payroll application per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score is 7.2 with high confidentiality, integrity, and availability impact, but exploitation requires existing high-level privileges (PR:H). There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Full compromise of the Oracle Public Sector Payroll module within Oracle E-Business Suite (Internal Operations component) is possible for an already-privileged attacker who can reach the application over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw affects supported EBS releases 12.2.4 through 12.2.15 and, though rated CVSS 7.2, requires high existing privileges (PR:H), which narrows the realistic attacker set to trusted or authenticated users. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise of the Oracle Shipping Execution module of Oracle E-Business Suite (Internal Operations component) is possible for a high-privileged attacker with HTTP network access, per Oracle's July 2026 Critical Patch Update. Affecting supported EBS releases 12.2.12 through 12.2.15, successful exploitation results in complete takeover of the Shipping Execution product with high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.2). There is no public exploit identified at time of analysis and the CVE is not on CISA KEV, so real-world urgency is tempered by the requirement for pre-existing high privileges.
Full compromise of Oracle HCM Configuration Workbench (Rapid Implementation component) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows a high-privileged, network-authenticated attacker to take over the module over HTTP with high confidentiality, integrity, and availability impact. Oracle addressed the flaw in the July 2026 Critical Patch Update; there is no public exploit identified at time of analysis, and it is not listed in CISA KEV. Despite the vendor 'Information Disclosure' tag, the CVSS vector reflects a full C/I/A takeover rather than mere data exposure.
Full server takeover in Oracle Mobile Application Server (the MWA component of Oracle E-Business Suite 12.2.3 through 12.2.15) allows a high-privileged, network-based attacker to fully compromise the server over HTTP, impacting confidentiality, integrity and availability (CVSS 3.1 base 7.2). Because the attacker must already hold high privileges (PR:H), this is a privilege-escalation-to-takeover issue rather than a pre-auth breach, and there is no public exploit identified at time of analysis nor CISA KEV listing.
Full compromise of Oracle Receivables (Oracle E-Business Suite, Internal Operations component) is possible in versions 12.2.3 through 12.2.15, where a high-privileged attacker with network HTTP access can take over the module, impacting confidentiality, integrity, and availability. Oracle rates this CVSS 3.1 7.2 and describes it as easily exploitable, though it requires existing high privileges (PR:H). No public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Full compromise of the Oracle Human Resources module (Data Removal Tool component) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is achievable by a high-privileged attacker with HTTP network access, resulting in complete takeover of the Human Resources application with confidentiality, integrity, and availability impact. Disclosed in Oracle's July 2026 Critical Patch Update (CVSS 3.1 base 7.2), the flaw requires existing elevated privileges (PR:H) but no user interaction and has low attack complexity. No public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise of Oracle Lease and Finance Management (versions 12.2.14 through 12.2.15), a module of Oracle E-Business Suite's Internal Operations component, is possible for a network-based attacker who already holds high application privileges. Oracle rates this CVSS 3.1 7.2 with high confidentiality, integrity, and availability impact, describing successful attacks as resulting in complete takeover of the module. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the modest EPSS-relevant profile is consistent with the high-privilege precondition limiting mass exploitation.
Full compromise of Oracle EDI Gateway (a module of Oracle E-Business Suite) is possible where a high-privileged, authenticated attacker with HTTP network access can achieve complete takeover of the component, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 7.2 with high confidentiality, integrity, and availability impact, affecting EBS versions 12.2.3 through 12.2.15. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Full compromise of Oracle Order Management (part of Oracle E-Business Suite) is possible via the Product Diagnostic Tools component in supported releases 12.2.3 through 12.2.15, where an authenticated high-privileged user with HTTP network access can achieve a complete takeover of the module with confidentiality, integrity, and availability impact. Oracle rates this CVSS 3.1 7.2 and describes it as easily exploitable. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; a fix is delivered in the Oracle Critical Patch Update of July 2026.
Full compromise of the Oracle Applications DBA component (Internal Operations) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is possible for an authenticated, high-privileged attacker with HTTP network access, resulting in complete takeover with high confidentiality, integrity, and availability impact. Rated CVSS 3.1 7.2 (High) by Oracle in the July 2026 Critical Patch Update. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Takeover of MySQL Server and MySQL Cluster is possible through the Server: Replication component, where a high-privileged attacker with network access can fully compromise affected instances. This authenticated flaw affects MySQL Server 8.4.0-8.4.10 and 9.7.0-9.7.1, and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1, and is fixed in Oracle's July 2026 Critical Patch Update. Oracle rates it CVSS 7.2 with full confidentiality, integrity and availability impact; no public exploit identified at time of analysis.
Full compromise (takeover) of Oracle PeopleSoft Enterprise FIN Billing Argentina 9.1 is possible by a high-privileged attacker with network access over HTTP, per Oracle's July 2026 Critical Patch Update. Successful attacks yield complete confidentiality, integrity, and availability loss of the Billing component. No public exploit identified at time of analysis and it is not listed in CISA KEV, though Oracle rates the attack complexity as low (easily exploitable) once the required privileges are held.
Full product takeover in Oracle Advanced Supply Chain Planning (Core component) of Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows an already high-privileged attacker with HTTP network access to fully compromise the module's confidentiality, integrity, and availability. Oracle rates it CVSS 3.1 7.2 and describes it as easily exploitable once the required elevated privileges are held. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but Oracle has addressed it in the July 2026 Critical Patch Update.
Full compromise of the Oracle Financials for the Americas module within Oracle E-Business Suite (versions 12.2.3 through 12.2.15) is possible via HTTP by an attacker who already holds high application privileges, leading to complete takeover of the module's confidentiality, integrity, and availability. Oracle rates it CVSS 7.2 and describes it as 'easily exploitable' once the privilege prerequisite is met. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the sole reference is the Oracle July 2026 Critical Patch Update advisory.
Full compromise of Oracle iRecruitment (Oracle E-Business Suite, Internal Operations component) is possible in versions 12.2.3 through 12.2.15, where a high-privileged attacker with network HTTP access can achieve complete takeover of the module with high confidentiality, integrity, and availability impact. Oracle rates this CVSS 3.1 7.2 and addressed it in the July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so this is a patch-priority issue driven by the total-takeover impact rather than by confirmed in-the-wild activity.
Full compromise of Oracle Interaction Blending, a telephony/campaign-routing module within Oracle E-Business Suite (Internal Operations component), is possible by a high-privileged attacker sending crafted HTTP requests over the network. Oracle rates successful exploitation as a complete takeover of the component with high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.2). No public exploit has been identified at time of analysis and it is not listed in CISA KEV, but the fix ships in Oracle's July 2026 Critical Patch Update.
Full takeover of the Oracle Trading Community module in Oracle E-Business Suite (versions 12.2.3 through 12.2.12) is achievable by a high-privileged, authenticated attacker sending crafted HTTP requests to the Party Search UI component. Because the CVSS vector reports high impact to confidentiality, integrity, and availability (C:H/I:H/A:H), a successful attack yields complete compromise of the Trading Community application rather than mere data leakage. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Full compromise of Oracle WebCenter Content (Fusion Middleware, Web Content Management component) is possible in versions 12.2.1.4.0 and 14.1.2.0.0, where a high-privileged attacker with HTTP network access can escalate to complete takeover of the product with confidentiality, integrity, and availability impact. Oracle rates this CVSS 3.1 7.2 and describes it as easily exploitable, though it requires existing high privileges. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; a fix ships in the Oracle Critical Patch Update of July 2026.
Privilege-based takeover in Oracle Enterprise Command Center Framework V16, a component of Oracle E-Business Suite (Core), allows a high-privileged attacker with HTTP network access to fully compromise the framework. Successful exploitation results in complete takeover with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis, and the flaw is addressed in the Oracle July 2026 Critical Patch Update.
Full compromise of Oracle SOA Suite (Oracle Fusion Middleware) is possible via the Integration Business Insight component in versions 12.2.1.4.0 and 14.1.2.0.0, where a high-privileged, authenticated attacker with HTTP network access can achieve complete takeover of the product with high confidentiality, integrity, and availability impact. Addressed in the Oracle Critical Patch Update of July 2026, this issue carries a CVSS 3.1 base score of 7.2. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the 'easily exploitable' language from Oracle (reflected as AC:L) makes prompt patching prudent for exposed instances.
Full server takeover of Oracle WebLogic Server 14.1.2.0.0 and 15.1.1.0.0 is possible via the administration Console component, where a high-privileged attacker with HTTP network access can fully compromise confidentiality, integrity, and availability. Rated CVSS 3.1 7.2, this is part of Oracle's July 2026 Critical Patch Update. No public exploit identified at time of analysis and it is not listed in CISA KEV.
Takeover of Oracle Unified Directory is possible in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 (OUD Core component), where a high-privileged attacker with network access via LDAP can fully compromise the directory service. Oracle rates this CVSS 7.2 with high confidentiality, integrity, and availability impact, and describes it as 'easily exploitable' once the required privileges are held. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so risk is gated primarily by the authentication requirement.
Full compromise of Oracle WebCenter Content: Imaging (Core component) is possible in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0, where a high-privileged attacker with network access over the T3 or IIOP protocols can take over the Imaging application entirely (CVSS 3.1 7.2, high confidentiality, integrity and availability impact). Fixes are delivered in the Oracle Critical Patch Update of July 2026. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Full compromise of Oracle WebCenter Content: Imaging (Core component) is possible in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0, where a high-privileged attacker with network access over HTTP can take over the Imaging service, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N) yields a 7.2 base score with high confidentiality, integrity, and availability impact, meaning the attacker gains complete control of the product. No public exploit is identified at time of analysis and the flaw is not listed in CISA KEV, though the vendor tags it under Information Disclosure.
Full compromise of Oracle JDeveloper (Oracle Fusion Middleware) is possible via the ADF Shared Components subcomponent, allowing an authenticated high-privileged attacker with HTTP network access to take over the product with high confidentiality, integrity, and availability impact. It affects supported versions 12.2.1.4.0 and 14.1.2.0.0, is disclosed in Oracle's July 2026 Critical Patch Update, and carries a CVSS 3.1 base score of 7.2. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full server takeover of Oracle WebLogic Server (Fusion Middleware, Console component) is achievable by an already-authenticated high-privileged attacker reaching the management Console over HTTPS. Affected supported releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, and successful exploitation yields complete compromise of confidentiality, integrity and availability. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV; it is addressed in Oracle's July 2026 Critical Patch Update.
Full compromise of Oracle Human Resources (part of Oracle E-Business Suite) is possible via the Data Removal Tool component, where a high-privileged attacker with HTTP network access can take over the module across supported releases 12.2.3 through 12.2.15. The flaw carries a CVSS 3.1 base score of 7.2 with high confidentiality, integrity, and availability impact, and Oracle classifies it as easily exploitable. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Privilege-to-RCE escalation in HPE Aruba Networking AOS-CX switch operating system allows an authenticated, high-privileged administrator to abuse a path traversal flaw in the CLI to copy arbitrary files from the underlying OS into a user-readable location, which can be leveraged to achieve remote code execution. The weakness affects the switch management CLI and requires existing administrative access; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. Impact is high across confidentiality, integrity, and availability because it breaks the boundary between the constrained CLI and the underlying operating system.
Full takeover of Oracle MySQL Server and MySQL Cluster is possible through the Server: X Plugin component, allowing a high-privileged attacker with network access via multiple protocols to compromise confidentiality, integrity, and availability. Affected builds include MySQL Server 8.4.0-8.4.10 and 9.7.0-9.7.1, plus MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. There is no public exploit identified at time of analysis and the flaw is not on the CISA KEV list, though Oracle rates it as easily exploitable once the required high privileges are held.
Full compromise of Oracle Property Manager (a module of Oracle E-Business Suite) is possible for a high-privileged attacker with HTTP network access, per Oracle's July 2026 Critical Patch Update. Affecting EBS releases 12.2.3 through 12.2.15, successful exploitation yields complete takeover of the Property Manager component with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, though Oracle rates it easily exploitable once the required privileges are held.
Authenticated remote code execution affects the command-line interface of HPE Aruba Networking AOS-CX, the network operating system running on Aruba CX-series switches. Multiple buffer overflow flaws in the CLI let a high-privileged operator break out of the managed shell and run arbitrary code as a privileged user on the underlying operating system, converting administrative CLI access into full control of the switch OS. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; EPSS data was not provided.
Full compromise of the Oracle HRMS (US) module within Oracle E-Business Suite is achievable by a high-privileged attacker over HTTP against the Internal Operations component, affecting supported releases 12.2.3 through 12.2.15. A successful attack yields complete takeover of the HRMS (US) subsystem with high confidentiality, integrity, and availability impact. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; it was reported through Oracle's internal security alert channel and fixed in the July 2026 Critical Patch Update.
Full compromise of the Oracle Process Manufacturing Systems module in Oracle E-Business Suite 12.2.11 through 12.2.15 is achievable by a high-privileged, authenticated attacker sending crafted HTTP requests to the Internal Operations component. Successful exploitation yields complete takeover of the Process Manufacturing Systems application with high confidentiality, integrity, and availability impact (CVSS 7.2). No public exploit identified at time of analysis and it is not listed in CISA KEV.
Full takeover of Oracle Cost Management (Inventory Costing component) in Oracle E-Business Suite 12.2.3 through 12.2.15 is achievable by an authenticated high-privileged attacker sending crafted HTTP requests over the network. Successful exploitation compromises confidentiality, integrity, and availability of the module, carrying a CVSS 3.1 base score of 7.2. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV, though it was reported and fixed by Oracle in the July 2026 Critical Patch Update.