Full system takeover is achievable against Oracle Hyperion Infrastructure Technology 11.2.25.0.000 via unauthenticated HTTP requests targeting the Lifecycle Management component. The CVSS vector (AV:N/AC:H/PR:N/UI:N) indicates network-exploitable, authentication-free access, though the high attack complexity (AC:H) suggests a non-trivial exploitation barrier such as a race condition, specific timing requirement, or environmental precondition. Successful exploitation yields complete confidentiality, integrity, and availability compromise of the affected system. No public exploit code or CISA KEV listing has been identified at time of analysis.
Full takeover of Oracle Hyperion Infrastructure Technology 11.2.25.0.000 is achievable by a remote unauthenticated attacker via HTTP, exploiting the Common Events component. The CVSS vector confirms no authentication or user interaction is required, though high attack complexity (AC:H) indicates exploitation is not trivial and likely requires specific timing, configuration state, or precise request crafting. Successful exploitation yields complete compromise of confidentiality, integrity, and availability, consistent with a system takeover - no public exploit or CISA KEV listing identified at time of analysis.
Full takeover of PeopleSoft Enterprise CC Common Application Objects version 9.2 is achievable by an unauthenticated remote attacker via the Oracle Net protocol. Despite the high-severity classification (CVSS 8.1), the attack complexity is rated High, meaning specific technical conditions must be satisfied for exploitation to succeed. No public exploit code exists at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, but the full C:H/I:H/A:H impact (confidentiality, integrity, and availability) makes this a meaningful risk for organizations running PeopleSoft 9.2 in network-accessible configurations.
Full system takeover is achievable against Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 via an unauthenticated HTTP attack targeting the Integration Broker component. The vulnerability carries a CVSS 3.1 score of 8.1 with complete confidentiality, integrity, and availability impact, though the AC:H metric indicates exploitation is not trivial and requires meeting specific attack complexity conditions. No public exploit code or CISA KEV listing has been identified at time of analysis, but the unauthenticated network attack path and full-takeover impact class make this a high-priority patching candidate for organizations running affected PeopleTools versions.
Complete system takeover of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 through 8.63) is achievable by unauthenticated network attackers via HTTP, specifically through the PIA Core Technology component. Despite the high attack complexity rating (AC:H), successful exploitation yields full confidentiality, integrity, and availability compromise - effectively handing an attacker control over the PeopleSoft environment. No public exploit code or CISA KEV listing has been identified at time of analysis, but the severity of the impact warrants prioritized remediation through Oracle's August 2026 Critical Patch Update.
Full server takeover in Oracle WebLogic Server Core component is achievable by unauthenticated remote attackers via the T3 and IIOP protocols, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Successful exploitation yields complete compromise of confidentiality, integrity, and availability of the targeted server instance. No public exploit has been identified at time of analysis, and exploitation is constrained by high attack complexity; however, WebLogic's T3/IIOP surface has a well-established history of critical deserialization exploits that warrants prioritized patching.
Unauthorized data access and tampering in Oracle Helidon 4.5.0's Imperative Web Server component allows low-privileged authenticated attackers to read or modify critical application data over HTTPS. The vulnerability is tagged as an authentication bypass, suggesting that a legitimately authenticated low-privilege user can circumvent authorization controls to access or alter data beyond their permitted scope. No public exploit code or CISA KEV listing has been identified at time of analysis, but the 8.1 CVSS score and high confidentiality and integrity impacts make this a meaningful risk in any deployment where untrusted low-privileged users have HTTPS access.
Oracle Commerce Guided Search and Experience Manager 11.4.0 exposes a high-severity authorization bypass over HTTP that allows any low-privileged, network-accessible attacker to achieve full confidentiality and integrity compromise of commerce data. The 'Authentication Bypass' tag combined with a PR:L vector indicates that authenticated users with minimal permissions can escalate access to read or manipulate all data accessible to the application, including potentially sensitive customer, catalog, and configuration data. No public exploit or CISA KEV listing has been identified at time of analysis, but Oracle has released a fix through the August 2026 Critical Patch Update.
Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 exposes a high-severity flaw in its Installation and Configuration component that allows low-privileged authenticated attackers to achieve full confidentiality and integrity compromise over HTTP. The CVSS 3.1 score of 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) reflects an easily exploitable network path requiring minimal attacker capability - classified by Oracle as 'easily exploitable.' No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the 'Authentication Bypass' tag in available intelligence suggests the low-privilege threshold may itself be circumventable.
Oracle Hyperion Financial Management 11.2.25.0.000 contains an authentication bypass in its Security component that allows a low-privileged authenticated attacker to exceed their authorized access over HTTP, resulting in full confidentiality and integrity compromise of all application data. The flaw enables unauthorized read access to sensitive corporate financial records as well as creation, deletion, or modification of critical data across the entire HFM instance. No public exploit has been identified at time of analysis, and Oracle addressed this vulnerability in the Critical Patch Update for August 2026.
Unauthorized data access and modification in Oracle Project Planning and Control (E-Business Suite versions 12.2.3 through 12.2.15) is achievable by a low-privileged authenticated network attacker via HTTP, targeting the Change Management component. The vulnerability is tagged as an authentication bypass, suggesting an attacker with minimal credentials can exceed their authorized access level to read or manipulate critical project data without any user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, but Oracle rates this as easily exploitable with a CVSS 8.1, making it a high-priority patching target in enterprise environments running E-Business Suite.
Oracle Hyperion Profitability and Cost Management 11.2.25.0.000 exposes critical financial data to full unauthorized read and write access through an authorization bypass flaw in its Deployment component, exploitable over HTTP by any low-privileged authenticated user. The dual high-severity impacts - complete confidentiality loss and full integrity compromise covering unauthorized creation, deletion, and modification of all PCM-accessible data - make this a significant threat to enterprise financial management environments. No public exploit has been identified at time of analysis, and CISA KEV listing is not confirmed.
Unauthorized data access and modification in Oracle Sales Foundation (Oracle E-Business Suite versions 12.2.3-12.2.15) is achievable by any low-privileged, network-authenticated attacker via HTTP, with no user interaction required. The vulnerability resides in the Security API component and is tagged as an authentication bypass, enabling an attacker to read, create, delete, or modify critical data across the entire Sales Foundation dataset. No public exploit code has been identified at time of analysis, and the CVE does not appear in the CISA KEV catalog, though the low exploitation complexity makes this a realistic near-term threat for exposed deployments.
Oracle Reports Developer 14.1.2.0.0 contains an authentication bypass flaw in its Security and Authentication component that allows a low-privileged network attacker to gain unauthorized read and write access to all data managed by the application over HTTP. Rated 8.1 CVSS with low attack complexity and no user interaction required, this represents a significant confidentiality and integrity risk for any organization with Oracle Reports Developer exposed on a network-accessible interface. No public exploit code or active exploitation has been identified at time of analysis.
Oracle Sales versions 12.2.3 through 12.2.15 within Oracle E-Business Suite allows low-privileged, network-authenticated attackers to gain full read and write access to critical data via the Internal Operations component over HTTP. The CVSS 3.1 score of 8.1 reflects high confidentiality and integrity impacts with low attack complexity, making this easily exploitable by any user with a valid low-privilege account. No public exploit has been identified at time of analysis, and this CVE is not currently listed in the CISA KEV catalog; Oracle's Critical Security Patch Update for August 2026 addresses this flaw.
Unauthorized data access and manipulation in Oracle Siebel CRM Cloud Applications (versions 22.3-26.6) is achievable by low-privileged, network-connected attackers via HTTP against the Siebel Cloud Manager component. Successful exploitation grants complete read access to all CRM data and the ability to create, delete, or modify critical records, with no availability disruption to the service itself. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the low attack complexity and low privilege requirement lower the bar for a targeted threat actor with valid credentials.
Authentication bypass in Oracle Hyperion Data Relationship Management 11.2.25.0.000 exposes critical master data to unauthenticated remote attackers over HTTP. Exploitation requires human interaction from a victim user - consistent with a reflected or client-side attack vector - allowing an attacker to read or tamper with all data accessible within the DRM platform, including sensitive master data governance records. No public exploit or CISA KEV listing has been identified at time of analysis, though the Oracle August 2026 Critical Patch Update addresses this issue.
Oracle Hyperion Financial Reporting version 11.2.25.0.000 is affected by an authentication bypass vulnerability exposing critical financial data to unauthenticated remote attackers over HTTP. Successful exploitation, which requires human interaction from a victim user, grants unauthorized read access to all accessible financial data as well as the ability to create, modify, or delete critical records. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the Authentication Bypass tag and CVSS 8.1 score highlight significant risk to corporate financial data confidentiality and integrity.
Remote authentication bypass in Oracle Siebel CRM Integration (Open Integration component, versions 25.12-26.6) allows unauthenticated network attackers via HTTP to achieve full confidentiality and integrity compromise of CRM data when a victim user interacts with attacker-controlled content. The vulnerability enables unauthorized read, create, delete, and modification access to all Siebel CRM Integration accessible data. Tagged as an Authentication Bypass by Oracle and scored CVSS 8.1 (High), no public exploit code or CISA KEV listing has been identified at time of analysis.
Full takeover of Oracle Hyperion Calculation Manager version 11.2.25.0.000 is achievable by an unauthenticated remote attacker over HTTP, resulting in complete loss of confidentiality, integrity, and availability. The attack is classified as difficult to exploit (AC:H), meaning specific conditions must align, but no credentials or user interaction are required once those conditions are met. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, though the severity of impact warrants priority patching for any affected deployment.
Two-Factor Authentication is fully bypassed in Froxlor's API layer (versions prior to 2.3.7), allowing any holder of a valid API key and secret to invoke all API operations - including management of domains, DNS records, SSL certificates, email, FTP, and databases - without supplying the configured TOTP code. The web UI enforces 2FA correctly via `FroxlorTwoFactorAuth::verifyCode()`, but the API authentication function `FroxlorRPC::validateAuth` in `lib/Froxlor/Api/FroxlorRPC.php` checks only key validity, expiration, API permission, and account status, with zero references to 2FA logic across the entire `lib/Froxlor/Api/` directory. Publicly available exploit code exists per the GHSA advisory, which documents a confirmed PoC environment against Froxlor 2.3.5 with a 2FA-enabled admin account.
Oracle Process Manufacturing Systems (OPM), part of Oracle E-Business Suite versions 12.2.3 through 12.2.15, exposes a high-severity authenticated network vulnerability in the Internal Operations component that allows low-privileged attackers to both read and manipulate critical data. The CVSS 3.1 score of 8.1 reflects high confidentiality and integrity impact with no availability impact, exploitable over HTTP without user interaction. Tagged as an Authentication Bypass, this vulnerability is described as 'easily exploitable,' raising the effective risk for any organization running unpatched OPM installations; no public exploit or CISA KEV listing has been identified at time of analysis.
Oracle Labor Distribution versions 12.2.3 through 12.2.15, a component of Oracle E-Business Suite, allows a low-privileged network attacker to bypass internal authorization controls via HTTP, resulting in complete unauthorized read and write access to critical labor and payroll cost distribution data. The vendor characterizes this as 'easily exploitable,' and the 'Authentication Bypass' tag indicates that a standard EBS account holder can escalate beyond their assigned access level within the Internal Operations component. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the low attack complexity and high dual confidentiality and integrity impact make this a high-priority item in the August 2026 Oracle CPU.
Unauthorized data access and manipulation in Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 through 9.2.26.4 is achievable by any low-privileged network attacker over HTTP, with no user interaction required. Tagged as an authentication bypass in the E1 IOT Orchestrator Security component, the vulnerability exposes both confidentiality and integrity of all data accessible to the Orchestrator - including critical business records - to unauthorized reads, creates, deletes, and modifications. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and broad version range make this a credible risk for all unpatched deployments.
Remote data compromise in Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.4) allows a low-privileged authenticated attacker to fully breach confidentiality and integrity of critical ERP data via HTTP, with no user interaction required. The vulnerability resides in the Business Logic Infra SEC component and is tagged as an Authentication Bypass, indicating the flaw permits unauthorized escalation beyond the attacker's assigned privilege level. No public exploit has been identified at time of analysis; Oracle's August 2026 Critical Patch Update is the designated remediation vehicle.
Full takeover of Oracle Applications Platform Engineering (Oracle E-Business Suite versions 12.2.3-12.2.15) is achievable by unauthenticated remote attackers via the Oracle Net protocol by exploiting a flaw in the Valid Session component. The CVSS 3.1 score of 8.1 reflects complete confidentiality, integrity, and availability impact, tempered by a high attack complexity (AC:H) that limits opportunistic mass exploitation. No public exploit code or CISA KEV listing exists at time of analysis, though the unauthenticated network vector over Oracle Net makes this a high-priority patch target for any internet-adjacent EBS deployment.
Full system takeover of Oracle Hyperion Infrastructure Technology 11.2.25.0.000 is achievable by unauthenticated remote attackers via HTTP, targeting the Common Events component. The CVSS 3.1 score of 8.1 reflects maximum CIA impact (C:H/I:H/A:H) offset by high attack complexity (AC:H), indicating that while no credentials are required, specific conditions must be met to exploit the vulnerability. No public exploit code or active exploitation has been identified at time of analysis, but Oracle's August 2026 CPU advisory confirms the issue and a patch is available.
Full takeover of Oracle WebCenter Portal is achievable by an unauthenticated remote attacker via HTTP, affecting the Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 of the Fusion Middleware stack. The CVSS vector rates this 8.1 due to high attack complexity (AC:H), meaning exploitation requires specific but unspecified preconditions to be met - yet successful exploitation yields complete compromise of confidentiality, integrity, and availability. No public exploit code and no CISA KEV listing have been identified at time of analysis; however, the Oracle CPU August 2026 advisory confirms the vulnerability is vendor-acknowledged.
Local File Inclusion in the Theme Test Drive WordPress plugin (versions <= 2.9.1) enables unauthenticated network-based attackers to supply arbitrary file paths to the theme preview mechanism, potentially exposing sensitive server files such as wp-config.php and - under certain server configurations - escalating to remote code execution via log poisoning or similar chaining techniques. The vulnerability is classified under CWE-98 (PHP File Inclusion) with a CVSS 8.1 score reflecting no authentication requirement but elevated attack complexity. No public exploit code or CISA KEV listing has been identified at time of analysis.
Remote Local File Inclusion in Vavo Core WordPress plugin versions 2.3.0 and earlier enables unauthenticated network-based attackers to include arbitrary local files from the server filesystem. Affecting WordPress installations running the spabrice-developed plugin, exploitation can expose highly sensitive files such as wp-config.php, leading to database credential theft and potential full site compromise. No public exploit has been identified at time of analysis, though the CVSS 8.1 score with High impact across all three dimensions signals significant severity if the preconditions for exploitation are met.
Unauthenticated adjacent-network exploitation of Oracle Hyperion Data Relationship Management 11.2.25.0.000 enables complete read and write access to all master data managed by the platform. The vulnerability resides in the Access and Security component and is tagged as an authentication bypass, allowing an attacker positioned on the same physical communication segment to exfiltrate sensitive hierarchical reference data and silently manipulate or delete critical records without credentials or user interaction. No public exploit has been identified at time of analysis and no CISA KEV listing has been observed, but the low attack complexity and absence of any authentication requirement make this a meaningful priority for organizations co-locating DRM with other internal systems on shared network segments.
Oracle Siebel CRM Integration versions 25.12-26.6 exposes a high-severity authentication bypass in its Open Integration component that permits an unauthenticated attacker on the same physical network segment to fully read and modify all data accessible through the integration layer. The CVSS 8.1 vector (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) confirms low-complexity, credential-free exploitation, though the adjacent-network requirement materially constrains the attacker population to insiders or laterally-moved threat actors. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthenticated adjacent-network exploitation of Oracle Siebel CRM Cloud Applications (versions 22.3 through 26.6) via the Siebel Cloud Manager component allows complete read and write access to all CRM data without credentials. The CVSS vector (AV:A/AC:L/PR:N/UI:N) confirms low-complexity, zero-authentication exploitation, constrained only by the requirement for physical or logical adjacency to the target network segment. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog; however, the authentication bypass tag and high integrity/confidentiality impact make this a serious concern for any environment with exposed CRM infrastructure.
Oracle WebCenter Portal Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 allows low-privileged, network-authenticated attackers to bypass authorization controls and achieve full read and write access to critical portal data via HTTP. The vulnerability is tagged as an Authentication Bypass, meaning an authenticated user with minimal privileges can escalate access beyond their intended authorization boundary. No public exploit has been identified at time of analysis, and it is not currently listed in the CISA KEV catalog, though the low attack complexity makes it a realistic threat in any environment where untrusted low-privileged accounts exist.
Authentication bypass in Oracle Hyperion Calculation Manager 11.2.25.0.000 allows unauthenticated network attackers to fully compromise both confidentiality and integrity of all data accessible within the product via HTTP. The flaw resides in the Security component and, once triggered, grants read, creation, deletion, and modification access to critical data - impacts consistent with complete data ownership. Human interaction from a victim is required (UI:R), suggesting a CSRF-style or socially-engineered delivery vector; no public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV.
Clickjacking in Mozilla Firefox's Widget component enables a remote unauthenticated attacker to trick users into triggering high-impact unintended browser actions through overlaid UI deception. All Firefox desktop releases prior to version 154 - and all ESR releases prior to 153.1 - are affected across platforms per CPE cpe:2.3:a:mozilla:firefox:*. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, but the low attack complexity and zero authentication requirement make this a credible risk for any organization deploying Firefox at scale.
Authentication bypass in Oracle Hyperion Financial Management 11.2.25.0.000 allows unauthenticated, network-adjacent attackers to fully read and manipulate sensitive financial consolidation data without any credentials. The affected component is HFM's Security subsystem, and exploitation requires only adjacency to the physical or logical network segment hosting the application - no user interaction or privileges needed. No public exploit code and no CISA KEV listing exist at time of analysis, though the low attack complexity makes this straightforward to exploit for any attacker achieving network adjacency.
Oracle Siebel CRM Deployment's Application Interface component (versions 17.0 through 26.6) exposes complete read and write access to all CRM data to unauthenticated attackers positioned on the adjacent network segment. The CVSS vector confirms zero authentication requirements and low attack complexity, meaning any actor with access to the physical communication segment hosting the Siebel server can silently exfiltrate or corrupt the entire CRM dataset. No active exploitation has been confirmed in the CISA KEV catalog and no public exploit code has been identified at time of analysis, but the authentication bypass classification combined with high confidentiality and integrity impact makes this a credible priority for organizations with insufficiently segmented internal networks.
Unauthenticated adjacent-network exploitation of Oracle Siebel CRM's Search component allows complete read and write access to all CRM data across versions 17.0 through 26.6. Successful exploitation enables creation, deletion, and modification of critical data as well as full confidentiality compromise without any prior authentication or user interaction. No public exploit identified at time of analysis, and this vulnerability is not currently listed in CISA KEV, though its low-complexity, unauthenticated nature makes it a credible priority for organizations with exposed Siebel deployments.
Missing authorization enforcement in Dell PowerStore storage appliances allows any attacker who has gained control of a mapped host connected to the array to read from or write to LUNs beyond those assigned to that initiator, effectively nullifying per-initiator LUN masking. Affected models span the full PowerStore T and Q product lines (500T through 7000T and beyond), as disclosed by Dell under advisory DSA-2026-330. No public exploit code or CISA KEV listing has been identified at time of analysis, but the complete C/I/A impact triplet reflects the severity of unrestricted storage access, particularly in multi-tenant or converged infrastructure environments where multiple workloads share the same array.
Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, enabling a high-privileged attacker to inject javascript: URIs that execute when a second user clicks the crafted link in the console. The scope change (S:C) in the CVSS vector confirms the XSS crosses the application's security boundary into the victim's browser session, exposing session tokens and permitting authenticated actions on behalf of the victim. No public exploit code or CISA KEV listing has been identified at time of analysis, but the C:H/I:H impact scores reflect meaningful credential theft and session hijacking potential within the Velociraptor investigation console.
Protection mechanism failure in Firefox's Data Loss Prevention (DLP) component allows remote attackers, with user interaction, to bypass DLP controls, resulting in high confidentiality and integrity impact. Affected versions span the standard Firefox release channel (prior to 154) and both active ESR branches (ESR 140.x prior to 140.14, ESR 153.x prior to 153.1). No public exploit exists and EPSS sits at 0.17% (7th percentile), indicating low observed exploitation probability despite the high CVSS score - no active exploitation is confirmed via CISA KEV.
Safe Browsing mitigation bypass in Mozilla Firefox allows a remote unauthenticated attacker (with user interaction) to circumvent Firefox's phishing and malware URL-blocking protections, classified under CWE-693 (Protection Mechanism Failure). Affected versions span all Firefox releases prior to 154 and all ESR branches prior to 140.14 and 153.1, giving this a broad blast radius across consumer and enterprise deployments. No public exploit code has been identified and EPSS sits at 0.16% (6th percentile), indicating low observed exploitation activity despite the high CVSS score of 8.1.
Site isolation bypass in Mozilla Firefox's Networking: Cookies component allows remote, unauthenticated attackers to read and manipulate cookies across origins when a victim visits a malicious page, scoring CVSS 8.1 (High) due to high confidentiality and integrity impact. The flaw, rooted in CWE-346 (Origin Validation Error), undermines a core browser security boundary that separates per-site cookie access. Vendor-released patches are available in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1; no public exploit or CISA KEV listing is identified at time of analysis.
Site isolation is broken in Firefox's WebExtensions component, allowing cross-origin access control boundaries to be violated. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) places this as network-exploitable with high confidentiality and integrity impact, requiring only that a user visit an attacker-controlled page. Vendor-released patches are confirmed across all active Firefox release channels; no public exploit has been identified at time of analysis and EPSS at 0.16% (5th percentile) reflects low current exploitation probability.
JWT signature validation is entirely absent in Otalio Ship Property Management System before version 2.22.0, allowing any authenticated user to forge arbitrary token claims and escalate to higher privilege levels. Because the server accepts tampered JWT payloads without verifying the cryptographic signature, a low-privileged account holder can self-promote to administrator or other elevated roles by modifying their own token. Mandiant disclosed this flaw; no public exploit code or CISA KEV listing has been identified at time of analysis.
Site isolation bypass in Mozilla Firefox's Audio/Video Web Codecs component allows remote attackers to perform cross-origin data access, potentially reading or modifying content belonging to other origins within the browser. Rooted in CWE-346 (Origin Validation Error), the flaw affects all Firefox releases prior to 154 and all ESR releases prior to 153.1. No public exploit identified at time of analysis, and an EPSS score of 0.15% (5th percentile) signals low current exploitation probability despite the high CVSS base score of 8.1.
Account pre-registration hijacking in Saleor's GraphQL `accountRegister` and `confirmAccount` mutation flow allows an unauthenticated attacker to claim a victim's identity by registering an account under the victim's email address before the legitimate user does. When the victim clicks the activation link sent to their inbox, Saleor activates the attacker-created account and - across versions 2.10.0rc1 through the respective patched releases - automatically merges anonymous orders and gift-card data for that email without verifying the account password or any additional authentication factor, exposing order history, names, postal addresses, and phone numbers to the attacker. No public exploit code or CISA KEV listing exists at time of analysis, but the attack is low-friction and fully reconstructible from the public GitHub advisory.
Full system takeover in Oracle Public Sector Human Resources (E-Business Suite versions 12.2.3 through 12.2.15) is achievable by a high-privileged, network-capable attacker exploiting a flaw in the Regression Testing component over HTTP. Successful exploitation results in complete compromise of confidentiality, integrity, and availability, with a scope change indicating that impact can cascade into adjacent Oracle EBS components beyond the directly affected module. No public exploit code has been identified and no CISA KEV listing exists at time of analysis.
Full system takeover of Oracle HRMS (US) versions 12.2.3 through 12.2.15 is achievable by a highly privileged network attacker exploiting a flaw in the US Payroll - General component via HTTP. The CVSS scope change (S:C) means a successful compromise can cascade into additional Oracle E-Business Suite modules beyond HRMS itself, amplifying the blast radius significantly. No public exploit code has been identified and this CVE is not listed in CISA KEV at time of analysis; remediation is addressed in Oracle's Critical Patch Update for August 2026.