Denial Of Service
Monthly
IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1 expose an unauthenticated remote denial-of-service condition rooted in a NULL pointer dereference. A remote attacker with no credentials or user interaction can crash affected network-accessible components, resulting in complete availability loss (A:H) with no confidentiality or integrity impact. No public exploit code or active exploitation has been confirmed at time of analysis, and IBM has released a patch via advisory https://www.ibm.com/support/pages/node/7283858.
Remote denial-of-service in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 is caused by a CWE-787 out-of-bounds write reachable by unauthenticated network attackers with no complexity prerequisites. The CVSS 3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) reflects straightforward remote triggering with high availability impact but no confidentiality or integrity consequence. IBM has released a patch via the vendor advisory; no public exploit code has been identified at time of analysis.
Remote denial-of-service in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 enables an unauthenticated network attacker to exhaust system resources and crash or severely degrade affected hosts. The root cause is uncontrolled resource consumption (CWE-400), exploitable without authentication or user interaction via a network-accessible service. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch addressed in advisory node/7283858.
Denial-of-service in the J-BusinessDirectory Joomla extension (all versions before 6.2.3) allows unauthenticated remote attackers to crash directory listing pages by supplying array or non-numeric values to pagination parameters such as limitstart[]. PHP arithmetic performed on these malformed inputs triggers fatal type errors, rendering the affected extension inoperable. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA KEV catalog.
Authentication bypass via WebAuthn assertion replay in phpMyFAQ affects all versions up to and including 4.1.5, fixed in 4.1.7. Because prepareForLogin generates a login challenge but neither WebAuthn controller writes the mutated key object back to the database, the anti-replay check is short-circuited by its own null guard, so an attacker who captures one successful WebAuthn assertion can resubmit it indefinitely to log in as that user with no hardware key or user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the root cause is well documented in the vendor advisory.
Memory exhaustion denial of service in cockpit-ws affects Red Hat Enterprise Linux 7 through 10 and Red Hat OpenShift Dev Spaces, exploitable by any remote unauthenticated attacker. The login page request handler leaks a heap allocation on every HTTP request that includes a CockpitLang cookie, with no authentication or special privilege required. Sustained request flooding with this cookie will exhaust host memory, crashing the cockpit-ws service and potentially destabilizing the underlying host; no public exploit or active exploitation has been identified at time of analysis.
Path traversal in 4gaBoards before version 3.3.8 allows authenticated project managers to read and then delete arbitrary files accessible to the server process through a crafted filename parameter in the export download endpoint. The vulnerability in `server/api/controllers/boards/download.js` passes unsanitized user input directly to `path.join()` without containment validation, enabling escape from the intended `private/exports/<user_id>/` directory. A compounding defect in the stream close handler passes the same traversal path to `fs.unlink()`, meaning each exploited download request also destroys the targeted file - combining exfiltration with irreversible data loss in a single HTTP request. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog.
Denial-of-service in TP-Link Tapo C200 v5 IP cameras allows adjacent-network unauthenticated attackers to crash the device's configuration service by submitting oversized encrypted ciphertext payloads that trigger unhandled exceptions. Affected firmware versions prior to V5_1.4.6 Build 260709 Rel.27675n are confirmed vulnerable per ENISA EUVD-2026-62194; successful exploitation temporarily disables HTTPS management and monitoring until the service self-recovers, with no confidentiality or integrity impact. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis.
Use-after-free in Google Chrome's WebGL subsystem allows remote code execution inside the browser sandbox for all Chrome versions prior to 151.0.7922.169. An attacker can achieve arbitrary code execution within the Chrome renderer by delivering a crafted HTML page to a victim, requiring only a single page visit. No public exploit code or CISA KEV listing has been identified at time of analysis; however, CVSS 8.8 with low attack complexity reflects meaningful real-world risk for any unpatched Chrome deployment.
Use-after-free in the Browser component of Google Chrome on macOS prior to 151.0.7922.169 enables remote attackers to execute arbitrary code outside the sandbox. Exploitation requires social engineering to induce a user to visit a crafted HTML page, placing this in the user-interaction-required category. No public exploit code or CISA KEV listing has been identified at time of analysis, but the sandbox escape impact elevates real-world severity significantly.
Unauthenticated remote exploitation of Oracle Helidon 4.5.3's Imperative Web Server component allows attackers with HTTP network access to perform unauthorized read, write, and partial denial-of-service operations against data accessible to the service. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms this is easily exploitable with no prerequisites, though impacts are bounded to partial CIA effects within the unchanged scope of the Helidon instance. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Unauthenticated remote exploitation of Oracle Helidon 4.5.3's Imperative Web Server component allows network attackers over HTTP to achieve partial confidentiality disclosure, data manipulation, and denial of service - with a confirmed scope change indicating the impact can extend to components beyond Helidon's own security boundary. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C) places this among the most easily reachable vulnerability classes: no credentials, no user interaction, and no elevated complexity required. Disclosed in Oracle's August 2026 Critical Security Patch Update, no public exploit code or CISA KEV listing has been identified at time of analysis.
Scope-changing compromise of Oracle Helidon 4.5.3 (Imperative Web Server component) lets a remote, unauthenticated attacker send HTTP requests that grant high-integrity write access to Helidon-accessible data, partial read disclosure, and a partial denial of service - with impact that can extend beyond Helidon into adjacent products. Rated CVSS 3.1 9.9 due to the scope change combined with easy, no-privilege network exploitation. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated network exploitation of Oracle Helidon 4.5.3's Imperative Web Server component allows remote attackers to partially compromise confidentiality, integrity, and availability of the affected system, with a confirmed scope change meaning attacks can extend impact to additional co-located products or services. The vulnerability is rated 8.3 (High) under CVSS 3.1, elevated by the scope change despite individually low CIA impact ratings. No public exploit code has been identified at time of analysis, and Oracle disclosed this through its August 2026 Critical Patch Update.
Unauthenticated remote compromise in Oracle Helidon 4.5.0's Imperative Web Server component lets network attackers reach critical data and disrupt service over plain HTTP with no credentials and no user interaction. Oracle rates it CVSS 3.1 9.4, reflecting high confidentiality and integrity impact plus partial denial of service, and it was disclosed in the Oracle Critical Patch Update of August 2026. No public exploit identified at time of analysis, but the trivial exploitability and unauthenticated network reach make it a top-tier patch priority.
Unauthenticated remote exploitation of Oracle Helidon 4.5.0's Imperative Web Server component allows network-adjacent attackers to partially compromise confidentiality, integrity, and availability via standard HTTP. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector confirms zero authentication or user interaction is required, and attack complexity is low - meaning successful exploitation demands minimal attacker skill or infrastructure. Disclosed through Oracle's Critical Patch Update for August 2026, no public exploit code has been identified at time of analysis, though the low-barrier network vector warrants prompt remediation for any internet-exposed Helidon deployment.
Remote unauthenticated exploitation of Oracle Helidon 4.5.0's Imperative Web Server component via HTTP allows attackers to perform unauthorized read access to a subset of data, unauthorized data modification, and partial denial of service - all without credentials or user interaction. Oracle classifies this as 'easily exploitable' in its August 2026 Critical Patch Update advisory. No public exploit identified at time of analysis, but the low attack complexity and network accessibility make this a straightforward target for opportunistic attackers.
Unauthenticated remote exploitation of Oracle Helidon 4.5.0's Imperative Web Server component via HTTP allows attackers to read a subset of accessible data, perform unauthorized write/modify operations, and cause a partial denial of service. The CVSS vector confirms network accessibility with no authentication, no user interaction, and low attack complexity, making this easily exploitable against exposed deployments. No public exploit code or CISA KEV listing has been identified at time of analysis, but the trivial exploitation conditions warrant prompt patching.
Denial-of-service in Oracle Helidon 3.2.19's Imperative Web Server component allows remote unauthenticated attackers to cause a complete hang or repeatable crash via HTTP, fully disrupting service availability. The vulnerability requires no authentication, no user interaction, and no special configuration, making it trivially exploitable against any network-accessible Helidon 3.2.19 instance. No public exploit code has been identified and it does not appear in CISA KEV at time of analysis, though the low attack complexity elevates operational risk for any exposed deployment.
Unauthenticated remote compromise of Oracle Helidon 4.5.0 (Imperative Web Server component, part of Oracle Fusion Middleware) lets a network attacker read, create, delete or modify all Helidon-accessible data and cause a partial denial of service, all over HTTP without credentials. Oracle rates this CVSS 9.4 and tags it as an authentication bypass, meaning attackers reach protected functionality without logging in. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated remote compromise of Oracle Helidon 3.2.18 (Imperative Web Server component) lets network attackers read, alter, or destroy all data the framework can access and degrade its availability. The flaw is remotely reachable over HTTP with no authentication or user interaction and carries a CVSS 3.1 base score of 9.4. It was disclosed in Oracle's August 2026 Critical Patch Update; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Oracle VM VirtualBox 7.2.14 Core component exposes a scope-changing integrity vulnerability that allows a local unauthenticated attacker - with logon access to the infrastructure hosting the hypervisor - to critically compromise VirtualBox data when a legitimate third party interacts with the product. The attack vector is local and requires human interaction, but the CVSS scope change (S:C) indicates that a successful exploit can break VM containment and significantly impact the host system or co-resident components beyond VirtualBox itself. No public exploit is identified at time of analysis, and the vulnerability is addressed via Oracle's August 2026 Critical Security Patch Update.
Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 exposes critical data and modification capabilities to low-privileged network attackers through a flaw in the BI Platform Security component, reachable via HTTP. The CVSS vector (AV:N/AC:L/PR:L/UI:N) combined with the 'Authentication Bypass' tag suggests an authenticated-but-low-privileged attacker can escalate access beyond their authorization boundary, achieving complete read and write access to all BI data plus partial availability disruption. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and high data impact make this a meaningful priority for organizations running this version.
Oracle BI Publisher's BI Platform Security component exposes high-severity data access and partial denial-of-service risk to low-privileged, network-based attackers across three actively supported versions (8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0). The 'Authentication Bypass' tag, combined with CVSS PR:L and S:C, indicates that a minimally authenticated attacker can circumvent platform-level security controls to gain complete unauthorized read access to all data accessible by BI Publisher and partially disrupt service - with confirmed scope change meaning downstream Oracle product integrations may also be compromised. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, but the low attack complexity and broad version coverage make this a realistic near-term threat for unpatched Oracle analytics environments.
Oracle Product Lifecycle Analytics 3.6.1 exposes a network-accessible vulnerability in its installation component that allows low-privileged authenticated attackers to fully read all application data, perform limited data modification, and cause partial service disruption via HTTP. The CVSS 3.1 score of 7.6 reflects meaningful real-world impact, particularly the high confidentiality impact against a supply chain analytics platform that may contain sensitive product and operational data. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Remote unauthenticated access to the Forge component of Oracle Commerce Guided Search and Oracle Commerce Experience Manager 11.4.0 allows network-based attackers to read all data accessible to the platform and inflict partial denial of service via ordinary HTTP requests. The CVSS vector confirms no authentication, user interaction, or special configuration is required, placing this firmly in the automatable, high-priority tier. No public exploit has been identified at time of analysis, but the vulnerability is addressed in Oracle's Critical Security Patch Update for August 2026.
Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 exposes a network-accessible flaw allowing low-privileged authenticated attackers via HTTP to read critical or all accessible application data and cause partial availability disruption. The CVSS 3.1 score of 7.1 reflects high confidentiality impact combined with low availability impact, with no integrity impact. No public exploit code or CISA KEV listing has been identified at time of analysis.
Oracle Commerce Experience Manager 11.4.0 exposes a network-accessible flaw in its Experience Manager component that permits low-privileged authenticated attackers to gain complete unauthorized access to all platform data and cause partial availability degradation via HTTP. The CVSS 3.1 score of 7.1 reflects high confidentiality impact with no integrity exposure, consistent with an authorization bypass or excessive data access pattern rather than code execution. No public exploit or CISA KEV listing exists at time of analysis; however, the intelligence tag 'Authentication Bypass' introduces a discrepancy with the PR:L metric that warrants verification against the full Oracle advisory.
Unauthenticated remote access to sensitive financial data in Oracle Hyperion Financial Management 11.2.25.0.000 is possible via a network-accessible HTTP attack against the Security component. The CVSS vector confirms no authentication, no user interaction, and no special conditions are required, placing this squarely in the high-severity, easily exploitable category. Successful exploitation yields complete read access to all data accessible by the application and a partial denial of service, making this a critical risk for financial institutions running the affected build. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthorized data exfiltration and partial service disruption in Oracle Hyperion Financial Management 11.2.25.0.000 is achievable by low-privileged network attackers via HTTP, with no user interaction required. The vulnerability resides in the Security component and, per the 'Authentication Bypass' tag, likely involves improper enforcement of access controls that permits a low-privileged user to read data far beyond their authorization level, achieving complete access to all Financial Management accessible data (C:H). No public exploit or active exploitation has been identified at time of analysis, but the low attack complexity and network accessibility make this straightforward to leverage for any authenticated user of the application.
Unauthorized data access and partial denial of service in Oracle Hyperion Financial Management 11.2.25.0.000 are achievable by any low-privileged, network-connected attacker via HTTP, with no user interaction required. The vulnerability resides in the Security component and, per vendor-assigned tags, involves an authentication bypass mechanism that elevates effective access beyond the attacker's granted privileges, enabling exposure of critical financial data. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA's KEV catalog; however, the low attack complexity and broad network exposure make it a high-priority remediation target for organizations running the affected release.
Unauthorized data disclosure and partial denial of service in Oracle Hyperion Financial Management 11.2.25.0.000 allows a low-privileged, network-authenticated attacker to gain complete read access to all financial data accessible within the application and degrade service availability via HTTP. The 'Authentication Bypass' tag suggests the Security component vulnerability enables privilege escalation beyond the attacker's granted role, exposing sensitive financial consolidation data. No public exploit or CISA KEV listing exists at time of analysis, but the combination of low attack complexity, network accessibility, and high confidentiality impact against enterprise financial data makes this a meaningful priority for affected organizations.
Oracle Workflow's Notification Mailer component in Oracle E-Business Suite 12.2.3 through 12.2.15 exposes an unauthenticated HTTP endpoint vulnerable to a complete denial-of-service condition. Attackers with network access can cause the Workflow service to hang or crash repeatedly with no authentication required and low attack complexity, as confirmed by Oracle's August 2026 CPU advisory. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis.
Unauthenticated remote exploitation of Oracle Hyperion Financial Management 11.2.25.0.000 exposes the Security component to authentication bypass via HTTP, enabling attackers to read critical or all accessible financial data and inflict a partial denial of service. The vulnerability is rated CVSS 8.2 (High) with a low-complexity, network-accessible attack vector requiring no privileges or user interaction. No public exploit code or CISA KEV listing has been identified at the time of analysis, though the authentication bypass tag and unauthenticated attack surface make this a meaningful priority for any organization running the affected version.
Remote unauthenticated denial-of-service in Oracle Helidon 3.2.18 allows network-reachable attackers to trigger a hang or repeatably crash the Imperative Web Server component via crafted HTTP requests, fully disrupting availability. The vulnerability carries a CVSS 3.1 score of 7.5, is described by Oracle as easily exploitable, and requires no authentication, no user interaction, and only standard HTTP network access. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity makes opportunistic probing straightforward against any internet-exposed Helidon instance.
Remote denial-of-service in Oracle Java SE's 2D component allows unauthenticated network attackers to hang or crash the JVM across versions 25.0.4 and 26.0.2 via multiple protocols. The attack surface spans both server-side Java deployments exposing 2D-related APIs through web services and client-side environments running sandboxed Java Web Start applications or applets processing untrusted code. Oracle characterizes this as easily exploitable with no public exploit identified at time of analysis; no KEV listing is present.
Oracle Hyperion Data Relationship Management (DRM) version 11.2.23.0.000 exposes its Web Client - Unicode component to unauthenticated remote attackers over HTTP. Exploitation allows complete read access to all DRM-accessible data - which in a master data management context often includes sensitive financial hierarchies and organizational structures - plus the ability to induce a partial denial of service. No public exploit has been identified at time of analysis, but the CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates trivially low attack complexity with no authentication barrier.
Remote exploitation of Oracle WebCenter Content's Content Server component allows unauthenticated network attackers to compromise confidentiality, integrity, and availability of the platform when a victim user interacts with a malicious payload delivered over HTTP. Both actively supported versions - 12.2.1.4.0 and 14.1.2.0.0 - are affected, and successful exploitation produces a scope change, meaning impacts can propagate beyond the directly targeted WebCenter Content instance to adjacent products within the Fusion Middleware stack. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and zero-privilege requirement make this a credible threat in internet-exposed deployments.
Oracle Loans 12.2.3 through 12.2.15, a component of Oracle E-Business Suite, exposes its Internal Operations component to network-based exploitation by low-privileged authenticated attackers over HTTP. Successful exploitation grants unauthorized ability to create, delete, or modify critical data across all Oracle Loans accessible records, and can induce a partial denial of service against the application. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the low attack complexity and broad affected version range (12.2.3-12.2.15) make this a notable priority for Oracle EBS deployments.
Oracle Scripting versions 12.2.3 through 12.2.15 within Oracle E-Business Suite exposes an Internal Operations component vulnerability allowing low-privileged, network-based attackers to achieve full confidentiality and integrity compromise of all Scripting-accessible data, plus partial service disruption. The "Authentication Bypass" tag from the intelligence feed creates a notable tension with the CVSS PR:L assignment - if the bypass allows unauthenticated users to obtain a low-privilege session context, the effective attack surface is wider than the CVSS vector alone suggests. No public exploit code or CISA KEV listing has been identified at time of analysis, and the AC:H rating constrains opportunistic exploitation.
Unauthorized data manipulation in Oracle General Ledger (E-Business Suite versions 12.2.3-12.2.15) allows a low-privileged, network-authenticated attacker to create, delete, or modify critical financial records via HTTP, with secondary read and partial availability impacts. The vulnerability resides in the Internal Operations component and requires only a valid low-privilege account - no elevated rights or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and high integrity impact make this a significant risk for any organization running Oracle EBS financials.
Oracle SDP Number Portability versions 12.2.3 through 12.2.15, a telecommunications management component of Oracle E-Business Suite, exposes a local privilege-abuse flaw in its Internal Operations component that enables high-privileged insiders or post-breach actors to compromise the affected system. Successful exploitation grants unauthorized creation, deletion, or modification of critical data, read access to a subset of accessible data, and the ability to cause a partial denial of service - with a scope change (S:C) extending potential impact to additional Oracle products co-hosted in the same E-Business Suite environment. No public exploit code exists and this CVE does not appear in the CISA KEV catalog at time of analysis; the CVSS 3.1 base score of 7.3 reflects the scope change rather than inherent exploitability from the perimeter.
Oracle Warehouse Management versions 12.2.3 through 12.2.15 within Oracle E-Business Suite allows low-privileged network-authenticated attackers to corrupt, delete, or create critical warehouse data and partially disrupt service availability over HTTP. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms easy exploitability requiring only a low-privilege account and HTTP connectivity - no user interaction or elevated rights are needed. No public exploit code or CISA KEV listing has been identified at time of analysis; the August 2026 Oracle Critical Patch Update references a fix.
Oracle Warehouse Management versions 12.2.3 through 12.2.15 - a component of Oracle E-Business Suite - exposes a high-severity vulnerability in its Internal Operations component allowing low-privileged, network-authenticated attackers to compromise confidentiality, integrity, and availability via HTTP. Successful exploitation enables unauthorized read and write access to critical warehouse management data, including creation, deletion, and modification of records, alongside a partial denial of service. No public exploit code has been identified at time of analysis, and the vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Unauthorized data access and partial denial of service affect Oracle General Ledger versions 12.2.3 through 12.2.15, a core financial management component of Oracle E-Business Suite. A low-privileged, network-authenticated attacker can exploit the Internal Operations component via HTTP to gain complete read access to all Oracle General Ledger data, perform unauthorized insert/update/delete operations on a subset of that data, and cause a partial availability disruption. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Unauthenticated remote exploitation of Oracle Hyperion Financial Reporting 11.2.25.0.000 allows network attackers to obtain complete access to all financial reporting data and cause a partial denial of service via HTTPS. The vulnerability resides in the Server component and is tagged as an authentication bypass, meaning no credentials are required to trigger the flaw against a network-exposed instance. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis, but the low attack complexity and zero authentication requirement make this a high-priority patch target for any organization running this specific version.
Unauthorized data disclosure and partial denial of service in Oracle Hyperion Profitability and Cost Management 11.2.25.0.000 is achievable by any low-privileged attacker with network access over HTTP targeting the Deployment component. The combination of a high confidentiality impact and an 'Authentication Bypass' tag from EUVD suggests the flaw may allow authenticated users to escalate access beyond their authorization level, potentially exposing all financial and operational data managed by the platform. No public exploit code or CISA KEV listing exists at time of analysis, though Oracle has addressed this in the August 2026 Critical Security Patch Update.
Oracle Advanced Inbound Telephony versions 12.2.3 through 12.2.15 exposes its Internal Operations component to low-privileged HTTP attackers who can achieve full read access to sensitive telephony data, limited data manipulation, and partial denial of service. The 'Authentication Bypass' tag suggests that while a valid low-privilege account is required to initiate the attack, the Internal Operations component fails to enforce additional authorization controls, allowing privilege escalation within the application. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; the vulnerability was disclosed by Oracle's own security team via the August 2026 Critical Patch Update.
Unauthenticated remote exploitation of Oracle Advanced Inbound Telephony (versions 12.2.3-12.2.15) within Oracle E-Business Suite allows a network attacker to perform unauthorized creation, deletion, or modification of critical telephony data and cause a partial denial of service via HTTPS. The CVSS 3.1 base score of 8.2 reflects high integrity impact and low availability impact with no confidentiality exposure. No public exploit code or active exploitation (CISA KEV listing) has been identified at time of analysis.
Oracle Applications DBA, the administrative component of Oracle E-Business Suite (EBS) versions 12.2.3 through 12.2.15, exposes critical internal operations over HTTP to low-privileged attackers. Successful exploitation enables unauthorized access to critical or complete data accessible by the Applications DBA component, along with the ability to trigger partial denial-of-service conditions against the same component. No public exploit has been identified at time of analysis, and this vulnerability is not currently listed in the CISA KEV catalog, though the low complexity and broad network accessibility make it a meaningful risk in unpatched EBS deployments.
Unauthorized data modification, partial denial of service, and limited data exposure in Oracle Hyperion Calculation Manager 11.2.25.0.000 are achievable by unauthenticated remote attackers over HTTP targeting the Security component. The CVSS 3.1 score of 7.0 reflects high integrity impact - attackers can create, delete, or modify critical EPM data - tempered by high attack complexity (AC:H) that prevents trivial automated exploitation. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis.
Unauthenticated remote exploitation of Oracle Reports Developer 14.1.2.0.0 via the SOAP interface allows attackers to read all data accessible to the application, perform partial data modification, and cause partial service disruption without credentials or user interaction. The vulnerability resides in the Security and Authentication component of Oracle Fusion Middleware, meaning authentication enforcement over the SOAP protocol can be bypassed entirely. No active exploitation has been confirmed at time of analysis, but the network-accessible, zero-authentication attack vector makes this a high-priority patching target for any organization with this product exposed beyond strictly controlled network segments.
Unauthenticated remote compromise of Oracle Reports Developer 12.2.1.19.0 is achievable via crafted SOAP requests targeting the Security and Authentication component, confirming an authentication bypass condition. The CVSS 3.1 vector (PR:N, AV:N, AC:L) indicates no credentials or user interaction are required, and the high confidentiality impact reflects full data exposure across all data accessible to the Reports Developer service. Additionally, limited integrity and availability degradation are possible, making this a high-priority patch candidate for any Oracle Fusion Middleware deployment running this version. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated remote exploitation of Oracle Reports Developer 12.2.1.19.0 via SMTP allows attackers to perform unauthorized data manipulation and cause a partial denial of service against the affected instance. The vulnerability resides in the Security and Authentication component of Oracle Fusion Middleware, and carries a scope-change designation indicating that successful attacks may cascade to impact additional Oracle products sharing the same environment. No public exploit code or active exploitation has been identified at time of analysis.
Unauthenticated remote exploitation of Oracle Hyperion Infrastructure Technology 11.2.25.0.000 via HTTP allows an attacker to read a subset of accessible data, perform unauthorized inserts, updates, or deletes, and cause a partial denial of service against the Installation and Configuration component. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms low attack complexity with no authentication required, making this trivially reachable for any attacker with network access to the service. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Oracle Hyperion Calculation Manager version 11.2.25.0.000 exposes a high-privileged, network-exploitable vulnerability in its Security component that enables complete unauthorized read access to all data accessible by the application, with additional limited integrity and availability impacts. The CVSS scope change (S:C) is a critical signal: successful exploitation can significantly affect other products within the same Oracle Hyperion suite deployment, amplifying organizational risk beyond the directly targeted component. No public exploit identified at time of analysis, and no CISA KEV listing; however, the combination of scope change and high confidentiality impact warrants prioritization in Oracle Hyperion deployments.
Unauthenticated remote compromise of Oracle Siebel CRM Cloud Applications (versions 22.3 through 26.6) is possible through the Siebel Cloud Manager component via crafted HTTP requests, requiring no privileges or user interaction. An attacker can gain full read access to all Siebel CRM Cloud data, perform limited unauthorized writes, and cause a partial denial of service, and because the flaw carries a scope change, exploitation can significantly impact additional connected products beyond Siebel itself. Rated CVSS 9.9; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data exposure and partial denial-of-service in Oracle Complex Maintenance, Repair and Overhaul (CMRO) versions 12.2.3 through 12.2.15 allows a low-privileged, network-based attacker to read critical or complete CMRO application data across a scope boundary into additional Oracle E-Business Suite components. The vulnerability resides in the Production component and is exploitable over HTTP without user interaction, though high attack complexity limits opportunistic exploitation. No public exploit code or CISA KEV listing exists at time of analysis; Oracle has issued remediation via the August 2026 Critical Patch Update.
Oracle BI Publisher's BI Platform Security component allows a low-privileged, network-adjacent attacker to compromise confidentiality, integrity, and availability of the platform via HTTP without user interaction. Affected versions span the full supported lifecycle - 8.2.0.0.0, 12.2.1.4.0, and the current 26.01.0.0.0 - making this broadly applicable across Oracle Analytics deployments. The flaw is tagged as an authentication bypass, meaning a minimally authenticated user may escalate access well beyond their assigned privileges to read or destroy critical report data and partially disrupt service. No public exploit or CISA KEV listing has been identified at time of analysis.
Remote unauthenticated exploitation of Oracle Business Intelligence Enterprise Edition's Pod Admin component allows attackers to access critical analytics data and cause partial service disruption over HTTP without credentials. Versions 8.2.0.0.0 and 26.01.0.0.0 are confirmed affected, with a CVSS 3.1 score of 8.2 reflecting low attack complexity and no authentication or user interaction requirement. No public exploit has been identified at time of analysis, and this vulnerability is not currently listed in the CISA KEV catalog; Oracle has addressed it in the August 2026 Critical Patch Update.
Unauthenticated remote exploitation of Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 via HTTP allows an attacker to create, delete, or modify critical platform-managed data through the Event Management component, with secondary impacts on confidentiality and service availability. The Oracle-published CVSS 8.6 score reflects a low-complexity, no-privilege-required attack path, making this accessible to non-sophisticated threat actors with network access. No public exploit code has been identified at time of analysis, and this vulnerability has not been added to the CISA KEV catalog.
Oracle Hyperion Calculation Manager version 11.2.25.0.000 exposes critical data and partial availability loss to low-privileged network attackers via a flaw in its Security component, accessible over HTTP. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms easy network exploitation requiring only a low-privilege account with no interaction, yielding high confidentiality impact and partial denial of service. Notably, the 'Authentication Bypass' tag in the intelligence data suggests the effective exploitation barrier may be lower than the PR:L metric implies. No public exploit has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 expose a high-severity flaw in the Runtime Tools component that allows a low-privileged, network-accessible attacker to gain complete read access to all portal-accessible data and perform limited data manipulation and partial denial of service via HTTP. The vulnerability is rated CVSS 7.6 and disclosed as part of Oracle's Critical Patch Update for August 2026. No public exploit code or CISA KEV listing has been identified at time of analysis, though the 'Authentication Bypass' tag in the intelligence metadata suggests potential elevation from low-privilege access that warrants close attention.
Oracle WebCenter Portal's Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 is exploitable over HTTP by unauthenticated remote attackers, subject to victim user interaction, enabling unauthorized modification or deletion of portal data and a partial denial of service. The CVSS:3.1/AV:N/AC:L/PR:N/UI:R vector confirms low-complexity network exploitation requiring no credentials, only that a victim user be induced to interact with attacker-controlled content. No public exploit code or CISA KEV listing has been identified at time of analysis; this was disclosed as part of Oracle's August 2026 Critical Patch Update.
Unauthenticated network exploitation of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 allows remote attackers to compromise confidentiality, integrity, and availability via HTTP without requiring any credentials or user interaction. Oracle's own advisory characterizes this as 'easily exploitable,' and the Authentication Bypass tag corroborates the PR:N CVSS metric, indicating the flaw circumvents access controls entirely. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and zero-prerequisite nature make this a high-priority patching target for any organization running the affected Fusion Middleware component.
Unauthenticated remote exploitation of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 allows network-accessible attackers to achieve complete read access to all application-accessible data, perform limited unauthorized data modification, and cause partial denial of service - all via HTTP with no credentials or user interaction required. The 'Authentication Bypass' tag in multi-source intelligence corroborates the PR:N CVSS metric, indicating the flaw circumvents access controls prior to any authentication gate. No CISA KEV listing or public proof-of-concept has been identified at time of analysis, though the low attack complexity (AC:L) makes opportunistic exploitation feasible once technical details circulate.
Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 within the Fusion Middleware stack expose an unauthenticated remote attack surface over HTTP, enabling network-accessible attackers to perform unauthorized creation, deletion, or modification of critical content data across all accessible WebCenter Sites instances, as well as cause a partial denial of service. The CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) confirms minimal attack complexity with no authentication or user interaction required, which Oracle's own advisory characterizes as 'easily exploitable'. No public exploit or CISA KEV listing has been identified at time of analysis, though the zero-prerequisite exploitation profile elevates urgency for exposed deployments.
Unauthenticated remote exploitation of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 allows network-adjacent or internet-facing attackers to perform unauthorized creation, deletion, or modification of critical content data, and to partially degrade service availability via HTTP. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms that no authentication, user interaction, or special configuration is required, placing this in the highest-risk category for unauthenticated web vulnerabilities. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis, but the low attack complexity warrants prompt remediation.
Oracle WebCenter Content's Content Server component, within the Oracle Fusion Middleware stack, exposes a network-reachable integrity compromise affecting versions 12.2.1.4.0 and 14.1.2.0.0. High-privileged authenticated attackers can access the service via HTTP to arbitrarily create, delete, or modify critical repository data, read a subset of accessible content, and cause partial denial of service - with a confirmed scope change indicating potential cascading impact on additional Oracle Fusion Middleware products. No public exploit code or CISA KEV listing has been identified at time of analysis.
Remote unauthenticated compromise of Oracle WebCenter Enterprise Capture (Fusion Middleware, Client Bundle component) allows an attacker with only network/HTTP reach to create, delete, or modify critical data, read a subset of accessible data, and cause partial denial of service. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected, and Oracle explicitly flags a scope change meaning successful attacks may significantly impact other products beyond Capture itself. Rated CVSS 3.1 9.9; disclosed in the Oracle Critical Patch Update of August 2026 with no public exploit identified at time of analysis.
Cross-scope compromise of Oracle WebCenter Content (Content Server component) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 allows a remote unauthenticated attacker to fully read, create, modify or delete all Content Server-accessible data and cause a partial denial of service. Oracle rates it CVSS 9.6, driven by a scope change (S:C) meaning successful attacks can significantly impact products beyond WebCenter Content itself. Exploitation requires tricking a legitimate user into an action (UI:R); there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Local code execution and data compromise in Oracle PeopleSoft Enterprise PeopleTools (Data Mover component) affects versions 8.61 through 8.63, requiring a highly privileged attacker with physical or logical infrastructure access and human interaction from a secondary party. Successful exploitation results in full confidentiality and integrity compromise of PeopleTools data, potential modification or deletion of critical records, and partial denial of service, with a confirmed scope change that can cascade impact to additional dependent PeopleSoft products. No public exploit code or CISA KEV listing has been identified at time of analysis, but the Oracle CSPU August 2026 advisory confirms this as a patched, vendor-acknowledged vulnerability.
Unauthenticated remote access to Oracle Siebel CRM Integration's REST component (versions 17.0 through 26.6) exposes all CRM integration data to unauthorized disclosure and enables partial denial of service via plain HTTP. The vulnerability requires no credentials, no user interaction, and no special configuration beyond the REST interface being reachable, making it exploitable by any network-adjacent or internet-facing attacker. No public exploit has been identified at time of analysis, but Oracle's Critical Patch Update for August 2026 confirms the issue and its severity classification of CVSS 8.2.
Unauthorized data disclosure and partial service disruption affect Oracle Siebel CRM's Marketing component across versions 17.0 through 26.6, exploitable by a low-privileged authenticated attacker via HTTP without requiring user interaction. The flaw enables complete read access to all data within the Siebel Apps - Marketing scope alongside degraded service availability, as confirmed by Oracle's August 2026 Critical Security Patch Update. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in CISA's Known Exploited Vulnerabilities catalog.
Compromise of Oracle WebCenter Portal's Composer component - versions 12.2.1.4.0 and 14.1.2.0.0 - allows an authenticated low-privilege attacker over HTTP to achieve high-integrity impact, including unauthorized creation, deletion, and modification of critical portal data, limited confidentiality exposure, and partial denial of service. The CVSS scope change (S:C) indicates exploitation can cascade to additional Oracle Fusion Middleware products beyond WebCenter Portal itself. Disclosed in Oracle's August 2026 Critical Security Patch Update; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthorized data access and modification in Oracle General Ledger (E-Business Suite versions 12.2.3-12.2.15) can be achieved by a low-privileged network attacker targeting the Internal Operations component via HTTP. Successful exploitation grants complete read and write access to critical GL financial data plus partial availability disruption - a severe outcome for any organization relying on EBS for financial record integrity. The 'Authentication Bypass' tag suggests the vulnerability allows a low-privileged authenticated user to escalate effective access beyond their authorization level; no public exploit code or CISA KEV listing has been identified at time of analysis.
Denial of service in Amazon ion-java (versions 1.9.0 through 1.11.x) is caused by the GZIP auto-decompression handler failing to enforce any upper bound on decompressed output size (CWE-409), a class of flaw commonly called a decompression bomb or zip bomb. Remote unauthenticated network attackers can submit a specially crafted compressed Ion document that expands to an arbitrarily large payload in memory, exhausting heap resources and crashing or stalling any application that parses untrusted Ion input. The CVSS 4.0 score of 8.7 (AV:N/AC:L/PR:N/UI:N) reflects the low exploitation barrier; no public exploit code or CISA KEV listing has been identified at time of analysis.
Uncontrolled heap memory preallocation in Amazon ion-java's binary Ion stream cursor exposes any application parsing untrusted Ion binary data to remote denial of service. Versions 1.9.0 through 1.11.x are affected; a crafted Ion binary document with an inflated declared-length field forces the JVM to preallocate excessive heap memory before input validation occurs, exhausting available resources and crashing the host service. No public exploit code has been identified, but the CVSS 4.0 vector confirms unauthenticated remote exploitation with low complexity, and a vendor-released patch is available in version 1.12.0.
Heap-based buffer overflow in Open5GS v.2.7.0 allows remote unauthenticated attackers to crash the NAS 5GS decoder chain by sending a NAS PDU with a mutated message type byte, resulting in denial of service to the AMF component and all connected UEs. The vulnerability is network-accessible with no authentication or user interaction required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N), making it trivially reachable from any host with access to the AMF N1 interface. A public proof-of-concept exploit exists, no public exploit identified as confirmed active exploitation (no CISA KEV listing), and no vendor patch has been confirmed at time of analysis.
Memory leak in Open5GS v2.7.0's AMF component allows remote unauthenticated attackers to exhaust process memory and crash the Access and Mobility Management Function via crafted NGAP messages. The vulnerable function ngap_send_to_nas() in src/amf/ngap-path.c fails to release allocated memory (CWE-401), enabling a sustained DoS against the 5G core network's connection management plane. No public exploit confirmation as CISA KEV, but a proof-of-concept gist has been published by the reporter, and the CVSS score of 7.5 with network vector and no authentication requirement reflects meaningful real-world risk for exposed deployments.
Privilege escalation and authorization bypass in Netflix Lemur before 1.9.3 permits any authenticated non-read-only user to revoke arbitrary TLS certificates fleet-wide, causing denial of service across all managed endpoints. Two chained API flaws - an unchecked upload endpoint and a row-scoped revocation check - allow an attacker to manufacture a shadow Lemur database record aliasing any real CA-side certificate, then trigger the issuer plugin to revoke the genuine certificate using stored authority credentials. No public exploit code has been identified, but the attack path is fully disclosed in the GitHub security advisory GHSA-pxmc-2ffp-8j67 and the fix commit.
Denial of service in NVIDIA Triton Inference Server for Linux exposes AI inference infrastructure to remote disruption through improper input validation. Unauthenticated network attackers can crash or render unresponsive the inference server by submitting malformed inputs, with CVSS 7.5 (AV:N/AC:L/PR:N/UI:N) confirming no authentication or user interaction is required. No public exploit code has been identified at time of analysis, and CISA KEV listing is absent, but the low attack complexity and zero-authentication requirement make this a meaningful availability risk for any Triton deployment reachable from untrusted networks.
Unbounded resource allocation in NVIDIA Triton Inference Server for Linux allows remote, unauthenticated attackers to exhaust server-side resources and cause denial of service against all tracked versions (CPE wildcard). The CVSS 7.5 High rating reflects a fully network-accessible attack path with no privileges or user interaction required, making the exposure surface broad for any Triton deployment reachable from untrusted networks. No public exploit code has been identified at time of analysis, and exploitation has not been confirmed by CISA KEV.
Path traversal in NVIDIA Triton Inference Server for Linux (CWE-22) lets remote attackers manipulate file paths to reach locations outside intended directories, with the vendor citing denial of service as the primary outcome. NVIDIA assigned a critical 9.8 CVSS score claiming full confidentiality, integrity, and availability impact, though the published description only asserts DoS. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Heap buffer overflow in the baresip 'libre' real-time communications library (versions prior to 4.8.1) lets remote attackers corrupt heap memory or crash any application running a WebSocket server via websock_accept()/websock_accept_proto(). The websock_decode() function miscalculates frame bounds for 64-bit extended-length masked frames, and the out-of-bounds XOR unmasking write is attacker-controlled. No public exploit identified at time of analysis, but the flaw is network-reachable and unauthenticated per the CVSS vector.
CPU exhaustion in Wazuh Manager 4.0.0-4.14.6 and 5.0.0-beta2 allows authenticated API users with the allow_run_as permission to fully deny service to all other API consumers by submitting arbitrarily deeply nested JSON to the POST /security/user/authenticate/run_as endpoint. The API framework processes these structures recursively without any depth or size limit, consuming CPU proportionally to nesting depth until the process becomes unresponsive. No public exploit identified at time of analysis, though the attack primitive is trivially constructible from the CVE description alone.
Path traversal in Wazuh Manager 4.0.0 through 4.14.5 allows unauthenticated remote attackers to destroy the manager's queue directory structure and halt all Wazuh services by registering an agent whose name begins with a dot (e.g., ".."). Two compounding weaknesses drive the impact: OS_IsValidName() failed to reject dot-prefixed agent names, and delete_diff() performs unsafe path concatenation that resolves the traversal sequence to the parent queue directory, wiping its subdirectories. Recovery requires manual intervention, creating a complete and sustained loss of SIEM and XDR visibility. No public exploit or CISA KEV listing has been identified at time of analysis.
Unbounded HTTP request payload processing in OpenSearch Dashboards' capabilities route handler allows unauthenticated remote attackers to exhaust server resources and cause a denial of service. Affected products span both self-hosted OpenSearch Dashboards (all versions per CPE) and Amazon OpenSearch Service. The CVSS 4.0 score of 8.7 with AV:N/AC:L/AT:N/PR:N/UI:N reflects low attack complexity and no authentication prerequisite, making any network-exposed instance potentially reachable. No public exploit or CISA KEV listing has been identified at time of analysis, and a vendor-released patch is available.
Account takeover in authentik (goauthentik) identity provider before 2026.2.6 and 2026.5.5 allows an attacker holding an account on an upstream SAML identity provider to hijack a victim's authentik account. By injecting an XML comment into the SAML NameID (e.g. victim<!--x-->attacker), the value authentik reads for user matching is truncated to the text before the comment while the IdP's signed assertion still validates, because comment-excluding canonicalization (xml-exc-c14n) strips the comment before the signature digest is computed. This binds the attacker's external identity to the victim's existing account without the victim's password or the IdP private key, and the malicious link persists across future logins. No public exploit identified at time of analysis; the flaw is fixed upstream and demonstrated by regression tests in the vendor patch.
Buffer overflow in Dell PowerStore SDNAS's NFS/RPC subsystem exposes the entire PowerStore appliance line (500T through 7000T and beyond) to unauthenticated remote exploitation. The CWE-120 flaw in the RPC request handler allows an unauthenticated network attacker to achieve arbitrary command execution or denial of service against the NAS service. The CVSS 8.1 score is tempered by High Attack Complexity (AC:H), indicating exploitation requires non-trivial payload engineering rather than a simple spray-and-pray approach; no public exploit code and no CISA KEV listing have been identified at time of analysis.
IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1 expose an unauthenticated remote denial-of-service condition rooted in a NULL pointer dereference. A remote attacker with no credentials or user interaction can crash affected network-accessible components, resulting in complete availability loss (A:H) with no confidentiality or integrity impact. No public exploit code or active exploitation has been confirmed at time of analysis, and IBM has released a patch via advisory https://www.ibm.com/support/pages/node/7283858.
Remote denial-of-service in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 is caused by a CWE-787 out-of-bounds write reachable by unauthenticated network attackers with no complexity prerequisites. The CVSS 3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) reflects straightforward remote triggering with high availability impact but no confidentiality or integrity consequence. IBM has released a patch via the vendor advisory; no public exploit code has been identified at time of analysis.
Remote denial-of-service in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 enables an unauthenticated network attacker to exhaust system resources and crash or severely degrade affected hosts. The root cause is uncontrolled resource consumption (CWE-400), exploitable without authentication or user interaction via a network-accessible service. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch addressed in advisory node/7283858.
Denial-of-service in the J-BusinessDirectory Joomla extension (all versions before 6.2.3) allows unauthenticated remote attackers to crash directory listing pages by supplying array or non-numeric values to pagination parameters such as limitstart[]. PHP arithmetic performed on these malformed inputs triggers fatal type errors, rendering the affected extension inoperable. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA KEV catalog.
Authentication bypass via WebAuthn assertion replay in phpMyFAQ affects all versions up to and including 4.1.5, fixed in 4.1.7. Because prepareForLogin generates a login challenge but neither WebAuthn controller writes the mutated key object back to the database, the anti-replay check is short-circuited by its own null guard, so an attacker who captures one successful WebAuthn assertion can resubmit it indefinitely to log in as that user with no hardware key or user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the root cause is well documented in the vendor advisory.
Memory exhaustion denial of service in cockpit-ws affects Red Hat Enterprise Linux 7 through 10 and Red Hat OpenShift Dev Spaces, exploitable by any remote unauthenticated attacker. The login page request handler leaks a heap allocation on every HTTP request that includes a CockpitLang cookie, with no authentication or special privilege required. Sustained request flooding with this cookie will exhaust host memory, crashing the cockpit-ws service and potentially destabilizing the underlying host; no public exploit or active exploitation has been identified at time of analysis.
Path traversal in 4gaBoards before version 3.3.8 allows authenticated project managers to read and then delete arbitrary files accessible to the server process through a crafted filename parameter in the export download endpoint. The vulnerability in `server/api/controllers/boards/download.js` passes unsanitized user input directly to `path.join()` without containment validation, enabling escape from the intended `private/exports/<user_id>/` directory. A compounding defect in the stream close handler passes the same traversal path to `fs.unlink()`, meaning each exploited download request also destroys the targeted file - combining exfiltration with irreversible data loss in a single HTTP request. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog.
Denial-of-service in TP-Link Tapo C200 v5 IP cameras allows adjacent-network unauthenticated attackers to crash the device's configuration service by submitting oversized encrypted ciphertext payloads that trigger unhandled exceptions. Affected firmware versions prior to V5_1.4.6 Build 260709 Rel.27675n are confirmed vulnerable per ENISA EUVD-2026-62194; successful exploitation temporarily disables HTTPS management and monitoring until the service self-recovers, with no confidentiality or integrity impact. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis.
Use-after-free in Google Chrome's WebGL subsystem allows remote code execution inside the browser sandbox for all Chrome versions prior to 151.0.7922.169. An attacker can achieve arbitrary code execution within the Chrome renderer by delivering a crafted HTML page to a victim, requiring only a single page visit. No public exploit code or CISA KEV listing has been identified at time of analysis; however, CVSS 8.8 with low attack complexity reflects meaningful real-world risk for any unpatched Chrome deployment.
Use-after-free in the Browser component of Google Chrome on macOS prior to 151.0.7922.169 enables remote attackers to execute arbitrary code outside the sandbox. Exploitation requires social engineering to induce a user to visit a crafted HTML page, placing this in the user-interaction-required category. No public exploit code or CISA KEV listing has been identified at time of analysis, but the sandbox escape impact elevates real-world severity significantly.
Unauthenticated remote exploitation of Oracle Helidon 4.5.3's Imperative Web Server component allows attackers with HTTP network access to perform unauthorized read, write, and partial denial-of-service operations against data accessible to the service. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms this is easily exploitable with no prerequisites, though impacts are bounded to partial CIA effects within the unchanged scope of the Helidon instance. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Unauthenticated remote exploitation of Oracle Helidon 4.5.3's Imperative Web Server component allows network attackers over HTTP to achieve partial confidentiality disclosure, data manipulation, and denial of service - with a confirmed scope change indicating the impact can extend to components beyond Helidon's own security boundary. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C) places this among the most easily reachable vulnerability classes: no credentials, no user interaction, and no elevated complexity required. Disclosed in Oracle's August 2026 Critical Security Patch Update, no public exploit code or CISA KEV listing has been identified at time of analysis.
Scope-changing compromise of Oracle Helidon 4.5.3 (Imperative Web Server component) lets a remote, unauthenticated attacker send HTTP requests that grant high-integrity write access to Helidon-accessible data, partial read disclosure, and a partial denial of service - with impact that can extend beyond Helidon into adjacent products. Rated CVSS 3.1 9.9 due to the scope change combined with easy, no-privilege network exploitation. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated network exploitation of Oracle Helidon 4.5.3's Imperative Web Server component allows remote attackers to partially compromise confidentiality, integrity, and availability of the affected system, with a confirmed scope change meaning attacks can extend impact to additional co-located products or services. The vulnerability is rated 8.3 (High) under CVSS 3.1, elevated by the scope change despite individually low CIA impact ratings. No public exploit code has been identified at time of analysis, and Oracle disclosed this through its August 2026 Critical Patch Update.
Unauthenticated remote compromise in Oracle Helidon 4.5.0's Imperative Web Server component lets network attackers reach critical data and disrupt service over plain HTTP with no credentials and no user interaction. Oracle rates it CVSS 3.1 9.4, reflecting high confidentiality and integrity impact plus partial denial of service, and it was disclosed in the Oracle Critical Patch Update of August 2026. No public exploit identified at time of analysis, but the trivial exploitability and unauthenticated network reach make it a top-tier patch priority.
Unauthenticated remote exploitation of Oracle Helidon 4.5.0's Imperative Web Server component allows network-adjacent attackers to partially compromise confidentiality, integrity, and availability via standard HTTP. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector confirms zero authentication or user interaction is required, and attack complexity is low - meaning successful exploitation demands minimal attacker skill or infrastructure. Disclosed through Oracle's Critical Patch Update for August 2026, no public exploit code has been identified at time of analysis, though the low-barrier network vector warrants prompt remediation for any internet-exposed Helidon deployment.
Remote unauthenticated exploitation of Oracle Helidon 4.5.0's Imperative Web Server component via HTTP allows attackers to perform unauthorized read access to a subset of data, unauthorized data modification, and partial denial of service - all without credentials or user interaction. Oracle classifies this as 'easily exploitable' in its August 2026 Critical Patch Update advisory. No public exploit identified at time of analysis, but the low attack complexity and network accessibility make this a straightforward target for opportunistic attackers.
Unauthenticated remote exploitation of Oracle Helidon 4.5.0's Imperative Web Server component via HTTP allows attackers to read a subset of accessible data, perform unauthorized write/modify operations, and cause a partial denial of service. The CVSS vector confirms network accessibility with no authentication, no user interaction, and low attack complexity, making this easily exploitable against exposed deployments. No public exploit code or CISA KEV listing has been identified at time of analysis, but the trivial exploitation conditions warrant prompt patching.
Denial-of-service in Oracle Helidon 3.2.19's Imperative Web Server component allows remote unauthenticated attackers to cause a complete hang or repeatable crash via HTTP, fully disrupting service availability. The vulnerability requires no authentication, no user interaction, and no special configuration, making it trivially exploitable against any network-accessible Helidon 3.2.19 instance. No public exploit code has been identified and it does not appear in CISA KEV at time of analysis, though the low attack complexity elevates operational risk for any exposed deployment.
Unauthenticated remote compromise of Oracle Helidon 4.5.0 (Imperative Web Server component, part of Oracle Fusion Middleware) lets a network attacker read, create, delete or modify all Helidon-accessible data and cause a partial denial of service, all over HTTP without credentials. Oracle rates this CVSS 9.4 and tags it as an authentication bypass, meaning attackers reach protected functionality without logging in. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated remote compromise of Oracle Helidon 3.2.18 (Imperative Web Server component) lets network attackers read, alter, or destroy all data the framework can access and degrade its availability. The flaw is remotely reachable over HTTP with no authentication or user interaction and carries a CVSS 3.1 base score of 9.4. It was disclosed in Oracle's August 2026 Critical Patch Update; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Oracle VM VirtualBox 7.2.14 Core component exposes a scope-changing integrity vulnerability that allows a local unauthenticated attacker - with logon access to the infrastructure hosting the hypervisor - to critically compromise VirtualBox data when a legitimate third party interacts with the product. The attack vector is local and requires human interaction, but the CVSS scope change (S:C) indicates that a successful exploit can break VM containment and significantly impact the host system or co-resident components beyond VirtualBox itself. No public exploit is identified at time of analysis, and the vulnerability is addressed via Oracle's August 2026 Critical Security Patch Update.
Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 exposes critical data and modification capabilities to low-privileged network attackers through a flaw in the BI Platform Security component, reachable via HTTP. The CVSS vector (AV:N/AC:L/PR:L/UI:N) combined with the 'Authentication Bypass' tag suggests an authenticated-but-low-privileged attacker can escalate access beyond their authorization boundary, achieving complete read and write access to all BI data plus partial availability disruption. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and high data impact make this a meaningful priority for organizations running this version.
Oracle BI Publisher's BI Platform Security component exposes high-severity data access and partial denial-of-service risk to low-privileged, network-based attackers across three actively supported versions (8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0). The 'Authentication Bypass' tag, combined with CVSS PR:L and S:C, indicates that a minimally authenticated attacker can circumvent platform-level security controls to gain complete unauthorized read access to all data accessible by BI Publisher and partially disrupt service - with confirmed scope change meaning downstream Oracle product integrations may also be compromised. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, but the low attack complexity and broad version coverage make this a realistic near-term threat for unpatched Oracle analytics environments.
Oracle Product Lifecycle Analytics 3.6.1 exposes a network-accessible vulnerability in its installation component that allows low-privileged authenticated attackers to fully read all application data, perform limited data modification, and cause partial service disruption via HTTP. The CVSS 3.1 score of 7.6 reflects meaningful real-world impact, particularly the high confidentiality impact against a supply chain analytics platform that may contain sensitive product and operational data. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Remote unauthenticated access to the Forge component of Oracle Commerce Guided Search and Oracle Commerce Experience Manager 11.4.0 allows network-based attackers to read all data accessible to the platform and inflict partial denial of service via ordinary HTTP requests. The CVSS vector confirms no authentication, user interaction, or special configuration is required, placing this firmly in the automatable, high-priority tier. No public exploit has been identified at time of analysis, but the vulnerability is addressed in Oracle's Critical Security Patch Update for August 2026.
Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 exposes a network-accessible flaw allowing low-privileged authenticated attackers via HTTP to read critical or all accessible application data and cause partial availability disruption. The CVSS 3.1 score of 7.1 reflects high confidentiality impact combined with low availability impact, with no integrity impact. No public exploit code or CISA KEV listing has been identified at time of analysis.
Oracle Commerce Experience Manager 11.4.0 exposes a network-accessible flaw in its Experience Manager component that permits low-privileged authenticated attackers to gain complete unauthorized access to all platform data and cause partial availability degradation via HTTP. The CVSS 3.1 score of 7.1 reflects high confidentiality impact with no integrity exposure, consistent with an authorization bypass or excessive data access pattern rather than code execution. No public exploit or CISA KEV listing exists at time of analysis; however, the intelligence tag 'Authentication Bypass' introduces a discrepancy with the PR:L metric that warrants verification against the full Oracle advisory.
Unauthenticated remote access to sensitive financial data in Oracle Hyperion Financial Management 11.2.25.0.000 is possible via a network-accessible HTTP attack against the Security component. The CVSS vector confirms no authentication, no user interaction, and no special conditions are required, placing this squarely in the high-severity, easily exploitable category. Successful exploitation yields complete read access to all data accessible by the application and a partial denial of service, making this a critical risk for financial institutions running the affected build. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthorized data exfiltration and partial service disruption in Oracle Hyperion Financial Management 11.2.25.0.000 is achievable by low-privileged network attackers via HTTP, with no user interaction required. The vulnerability resides in the Security component and, per the 'Authentication Bypass' tag, likely involves improper enforcement of access controls that permits a low-privileged user to read data far beyond their authorization level, achieving complete access to all Financial Management accessible data (C:H). No public exploit or active exploitation has been identified at time of analysis, but the low attack complexity and network accessibility make this straightforward to leverage for any authenticated user of the application.
Unauthorized data access and partial denial of service in Oracle Hyperion Financial Management 11.2.25.0.000 are achievable by any low-privileged, network-connected attacker via HTTP, with no user interaction required. The vulnerability resides in the Security component and, per vendor-assigned tags, involves an authentication bypass mechanism that elevates effective access beyond the attacker's granted privileges, enabling exposure of critical financial data. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA's KEV catalog; however, the low attack complexity and broad network exposure make it a high-priority remediation target for organizations running the affected release.
Unauthorized data disclosure and partial denial of service in Oracle Hyperion Financial Management 11.2.25.0.000 allows a low-privileged, network-authenticated attacker to gain complete read access to all financial data accessible within the application and degrade service availability via HTTP. The 'Authentication Bypass' tag suggests the Security component vulnerability enables privilege escalation beyond the attacker's granted role, exposing sensitive financial consolidation data. No public exploit or CISA KEV listing exists at time of analysis, but the combination of low attack complexity, network accessibility, and high confidentiality impact against enterprise financial data makes this a meaningful priority for affected organizations.
Oracle Workflow's Notification Mailer component in Oracle E-Business Suite 12.2.3 through 12.2.15 exposes an unauthenticated HTTP endpoint vulnerable to a complete denial-of-service condition. Attackers with network access can cause the Workflow service to hang or crash repeatedly with no authentication required and low attack complexity, as confirmed by Oracle's August 2026 CPU advisory. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis.
Unauthenticated remote exploitation of Oracle Hyperion Financial Management 11.2.25.0.000 exposes the Security component to authentication bypass via HTTP, enabling attackers to read critical or all accessible financial data and inflict a partial denial of service. The vulnerability is rated CVSS 8.2 (High) with a low-complexity, network-accessible attack vector requiring no privileges or user interaction. No public exploit code or CISA KEV listing has been identified at the time of analysis, though the authentication bypass tag and unauthenticated attack surface make this a meaningful priority for any organization running the affected version.
Remote unauthenticated denial-of-service in Oracle Helidon 3.2.18 allows network-reachable attackers to trigger a hang or repeatably crash the Imperative Web Server component via crafted HTTP requests, fully disrupting availability. The vulnerability carries a CVSS 3.1 score of 7.5, is described by Oracle as easily exploitable, and requires no authentication, no user interaction, and only standard HTTP network access. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity makes opportunistic probing straightforward against any internet-exposed Helidon instance.
Remote denial-of-service in Oracle Java SE's 2D component allows unauthenticated network attackers to hang or crash the JVM across versions 25.0.4 and 26.0.2 via multiple protocols. The attack surface spans both server-side Java deployments exposing 2D-related APIs through web services and client-side environments running sandboxed Java Web Start applications or applets processing untrusted code. Oracle characterizes this as easily exploitable with no public exploit identified at time of analysis; no KEV listing is present.
Oracle Hyperion Data Relationship Management (DRM) version 11.2.23.0.000 exposes its Web Client - Unicode component to unauthenticated remote attackers over HTTP. Exploitation allows complete read access to all DRM-accessible data - which in a master data management context often includes sensitive financial hierarchies and organizational structures - plus the ability to induce a partial denial of service. No public exploit has been identified at time of analysis, but the CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates trivially low attack complexity with no authentication barrier.
Remote exploitation of Oracle WebCenter Content's Content Server component allows unauthenticated network attackers to compromise confidentiality, integrity, and availability of the platform when a victim user interacts with a malicious payload delivered over HTTP. Both actively supported versions - 12.2.1.4.0 and 14.1.2.0.0 - are affected, and successful exploitation produces a scope change, meaning impacts can propagate beyond the directly targeted WebCenter Content instance to adjacent products within the Fusion Middleware stack. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and zero-privilege requirement make this a credible threat in internet-exposed deployments.
Oracle Loans 12.2.3 through 12.2.15, a component of Oracle E-Business Suite, exposes its Internal Operations component to network-based exploitation by low-privileged authenticated attackers over HTTP. Successful exploitation grants unauthorized ability to create, delete, or modify critical data across all Oracle Loans accessible records, and can induce a partial denial of service against the application. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the low attack complexity and broad affected version range (12.2.3-12.2.15) make this a notable priority for Oracle EBS deployments.
Oracle Scripting versions 12.2.3 through 12.2.15 within Oracle E-Business Suite exposes an Internal Operations component vulnerability allowing low-privileged, network-based attackers to achieve full confidentiality and integrity compromise of all Scripting-accessible data, plus partial service disruption. The "Authentication Bypass" tag from the intelligence feed creates a notable tension with the CVSS PR:L assignment - if the bypass allows unauthenticated users to obtain a low-privilege session context, the effective attack surface is wider than the CVSS vector alone suggests. No public exploit code or CISA KEV listing has been identified at time of analysis, and the AC:H rating constrains opportunistic exploitation.
Unauthorized data manipulation in Oracle General Ledger (E-Business Suite versions 12.2.3-12.2.15) allows a low-privileged, network-authenticated attacker to create, delete, or modify critical financial records via HTTP, with secondary read and partial availability impacts. The vulnerability resides in the Internal Operations component and requires only a valid low-privilege account - no elevated rights or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and high integrity impact make this a significant risk for any organization running Oracle EBS financials.
Oracle SDP Number Portability versions 12.2.3 through 12.2.15, a telecommunications management component of Oracle E-Business Suite, exposes a local privilege-abuse flaw in its Internal Operations component that enables high-privileged insiders or post-breach actors to compromise the affected system. Successful exploitation grants unauthorized creation, deletion, or modification of critical data, read access to a subset of accessible data, and the ability to cause a partial denial of service - with a scope change (S:C) extending potential impact to additional Oracle products co-hosted in the same E-Business Suite environment. No public exploit code exists and this CVE does not appear in the CISA KEV catalog at time of analysis; the CVSS 3.1 base score of 7.3 reflects the scope change rather than inherent exploitability from the perimeter.
Oracle Warehouse Management versions 12.2.3 through 12.2.15 within Oracle E-Business Suite allows low-privileged network-authenticated attackers to corrupt, delete, or create critical warehouse data and partially disrupt service availability over HTTP. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms easy exploitability requiring only a low-privilege account and HTTP connectivity - no user interaction or elevated rights are needed. No public exploit code or CISA KEV listing has been identified at time of analysis; the August 2026 Oracle Critical Patch Update references a fix.
Oracle Warehouse Management versions 12.2.3 through 12.2.15 - a component of Oracle E-Business Suite - exposes a high-severity vulnerability in its Internal Operations component allowing low-privileged, network-authenticated attackers to compromise confidentiality, integrity, and availability via HTTP. Successful exploitation enables unauthorized read and write access to critical warehouse management data, including creation, deletion, and modification of records, alongside a partial denial of service. No public exploit code has been identified at time of analysis, and the vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Unauthorized data access and partial denial of service affect Oracle General Ledger versions 12.2.3 through 12.2.15, a core financial management component of Oracle E-Business Suite. A low-privileged, network-authenticated attacker can exploit the Internal Operations component via HTTP to gain complete read access to all Oracle General Ledger data, perform unauthorized insert/update/delete operations on a subset of that data, and cause a partial availability disruption. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Unauthenticated remote exploitation of Oracle Hyperion Financial Reporting 11.2.25.0.000 allows network attackers to obtain complete access to all financial reporting data and cause a partial denial of service via HTTPS. The vulnerability resides in the Server component and is tagged as an authentication bypass, meaning no credentials are required to trigger the flaw against a network-exposed instance. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis, but the low attack complexity and zero authentication requirement make this a high-priority patch target for any organization running this specific version.
Unauthorized data disclosure and partial denial of service in Oracle Hyperion Profitability and Cost Management 11.2.25.0.000 is achievable by any low-privileged attacker with network access over HTTP targeting the Deployment component. The combination of a high confidentiality impact and an 'Authentication Bypass' tag from EUVD suggests the flaw may allow authenticated users to escalate access beyond their authorization level, potentially exposing all financial and operational data managed by the platform. No public exploit code or CISA KEV listing exists at time of analysis, though Oracle has addressed this in the August 2026 Critical Security Patch Update.
Oracle Advanced Inbound Telephony versions 12.2.3 through 12.2.15 exposes its Internal Operations component to low-privileged HTTP attackers who can achieve full read access to sensitive telephony data, limited data manipulation, and partial denial of service. The 'Authentication Bypass' tag suggests that while a valid low-privilege account is required to initiate the attack, the Internal Operations component fails to enforce additional authorization controls, allowing privilege escalation within the application. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; the vulnerability was disclosed by Oracle's own security team via the August 2026 Critical Patch Update.
Unauthenticated remote exploitation of Oracle Advanced Inbound Telephony (versions 12.2.3-12.2.15) within Oracle E-Business Suite allows a network attacker to perform unauthorized creation, deletion, or modification of critical telephony data and cause a partial denial of service via HTTPS. The CVSS 3.1 base score of 8.2 reflects high integrity impact and low availability impact with no confidentiality exposure. No public exploit code or active exploitation (CISA KEV listing) has been identified at time of analysis.
Oracle Applications DBA, the administrative component of Oracle E-Business Suite (EBS) versions 12.2.3 through 12.2.15, exposes critical internal operations over HTTP to low-privileged attackers. Successful exploitation enables unauthorized access to critical or complete data accessible by the Applications DBA component, along with the ability to trigger partial denial-of-service conditions against the same component. No public exploit has been identified at time of analysis, and this vulnerability is not currently listed in the CISA KEV catalog, though the low complexity and broad network accessibility make it a meaningful risk in unpatched EBS deployments.
Unauthorized data modification, partial denial of service, and limited data exposure in Oracle Hyperion Calculation Manager 11.2.25.0.000 are achievable by unauthenticated remote attackers over HTTP targeting the Security component. The CVSS 3.1 score of 7.0 reflects high integrity impact - attackers can create, delete, or modify critical EPM data - tempered by high attack complexity (AC:H) that prevents trivial automated exploitation. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis.
Unauthenticated remote exploitation of Oracle Reports Developer 14.1.2.0.0 via the SOAP interface allows attackers to read all data accessible to the application, perform partial data modification, and cause partial service disruption without credentials or user interaction. The vulnerability resides in the Security and Authentication component of Oracle Fusion Middleware, meaning authentication enforcement over the SOAP protocol can be bypassed entirely. No active exploitation has been confirmed at time of analysis, but the network-accessible, zero-authentication attack vector makes this a high-priority patching target for any organization with this product exposed beyond strictly controlled network segments.
Unauthenticated remote compromise of Oracle Reports Developer 12.2.1.19.0 is achievable via crafted SOAP requests targeting the Security and Authentication component, confirming an authentication bypass condition. The CVSS 3.1 vector (PR:N, AV:N, AC:L) indicates no credentials or user interaction are required, and the high confidentiality impact reflects full data exposure across all data accessible to the Reports Developer service. Additionally, limited integrity and availability degradation are possible, making this a high-priority patch candidate for any Oracle Fusion Middleware deployment running this version. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated remote exploitation of Oracle Reports Developer 12.2.1.19.0 via SMTP allows attackers to perform unauthorized data manipulation and cause a partial denial of service against the affected instance. The vulnerability resides in the Security and Authentication component of Oracle Fusion Middleware, and carries a scope-change designation indicating that successful attacks may cascade to impact additional Oracle products sharing the same environment. No public exploit code or active exploitation has been identified at time of analysis.
Unauthenticated remote exploitation of Oracle Hyperion Infrastructure Technology 11.2.25.0.000 via HTTP allows an attacker to read a subset of accessible data, perform unauthorized inserts, updates, or deletes, and cause a partial denial of service against the Installation and Configuration component. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms low attack complexity with no authentication required, making this trivially reachable for any attacker with network access to the service. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Oracle Hyperion Calculation Manager version 11.2.25.0.000 exposes a high-privileged, network-exploitable vulnerability in its Security component that enables complete unauthorized read access to all data accessible by the application, with additional limited integrity and availability impacts. The CVSS scope change (S:C) is a critical signal: successful exploitation can significantly affect other products within the same Oracle Hyperion suite deployment, amplifying organizational risk beyond the directly targeted component. No public exploit identified at time of analysis, and no CISA KEV listing; however, the combination of scope change and high confidentiality impact warrants prioritization in Oracle Hyperion deployments.
Unauthenticated remote compromise of Oracle Siebel CRM Cloud Applications (versions 22.3 through 26.6) is possible through the Siebel Cloud Manager component via crafted HTTP requests, requiring no privileges or user interaction. An attacker can gain full read access to all Siebel CRM Cloud data, perform limited unauthorized writes, and cause a partial denial of service, and because the flaw carries a scope change, exploitation can significantly impact additional connected products beyond Siebel itself. Rated CVSS 9.9; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data exposure and partial denial-of-service in Oracle Complex Maintenance, Repair and Overhaul (CMRO) versions 12.2.3 through 12.2.15 allows a low-privileged, network-based attacker to read critical or complete CMRO application data across a scope boundary into additional Oracle E-Business Suite components. The vulnerability resides in the Production component and is exploitable over HTTP without user interaction, though high attack complexity limits opportunistic exploitation. No public exploit code or CISA KEV listing exists at time of analysis; Oracle has issued remediation via the August 2026 Critical Patch Update.
Oracle BI Publisher's BI Platform Security component allows a low-privileged, network-adjacent attacker to compromise confidentiality, integrity, and availability of the platform via HTTP without user interaction. Affected versions span the full supported lifecycle - 8.2.0.0.0, 12.2.1.4.0, and the current 26.01.0.0.0 - making this broadly applicable across Oracle Analytics deployments. The flaw is tagged as an authentication bypass, meaning a minimally authenticated user may escalate access well beyond their assigned privileges to read or destroy critical report data and partially disrupt service. No public exploit or CISA KEV listing has been identified at time of analysis.
Remote unauthenticated exploitation of Oracle Business Intelligence Enterprise Edition's Pod Admin component allows attackers to access critical analytics data and cause partial service disruption over HTTP without credentials. Versions 8.2.0.0.0 and 26.01.0.0.0 are confirmed affected, with a CVSS 3.1 score of 8.2 reflecting low attack complexity and no authentication or user interaction requirement. No public exploit has been identified at time of analysis, and this vulnerability is not currently listed in the CISA KEV catalog; Oracle has addressed it in the August 2026 Critical Patch Update.
Unauthenticated remote exploitation of Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 via HTTP allows an attacker to create, delete, or modify critical platform-managed data through the Event Management component, with secondary impacts on confidentiality and service availability. The Oracle-published CVSS 8.6 score reflects a low-complexity, no-privilege-required attack path, making this accessible to non-sophisticated threat actors with network access. No public exploit code has been identified at time of analysis, and this vulnerability has not been added to the CISA KEV catalog.
Oracle Hyperion Calculation Manager version 11.2.25.0.000 exposes critical data and partial availability loss to low-privileged network attackers via a flaw in its Security component, accessible over HTTP. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms easy network exploitation requiring only a low-privilege account with no interaction, yielding high confidentiality impact and partial denial of service. Notably, the 'Authentication Bypass' tag in the intelligence data suggests the effective exploitation barrier may be lower than the PR:L metric implies. No public exploit has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 expose a high-severity flaw in the Runtime Tools component that allows a low-privileged, network-accessible attacker to gain complete read access to all portal-accessible data and perform limited data manipulation and partial denial of service via HTTP. The vulnerability is rated CVSS 7.6 and disclosed as part of Oracle's Critical Patch Update for August 2026. No public exploit code or CISA KEV listing has been identified at time of analysis, though the 'Authentication Bypass' tag in the intelligence metadata suggests potential elevation from low-privilege access that warrants close attention.
Oracle WebCenter Portal's Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 is exploitable over HTTP by unauthenticated remote attackers, subject to victim user interaction, enabling unauthorized modification or deletion of portal data and a partial denial of service. The CVSS:3.1/AV:N/AC:L/PR:N/UI:R vector confirms low-complexity network exploitation requiring no credentials, only that a victim user be induced to interact with attacker-controlled content. No public exploit code or CISA KEV listing has been identified at time of analysis; this was disclosed as part of Oracle's August 2026 Critical Patch Update.
Unauthenticated network exploitation of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 allows remote attackers to compromise confidentiality, integrity, and availability via HTTP without requiring any credentials or user interaction. Oracle's own advisory characterizes this as 'easily exploitable,' and the Authentication Bypass tag corroborates the PR:N CVSS metric, indicating the flaw circumvents access controls entirely. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and zero-prerequisite nature make this a high-priority patching target for any organization running the affected Fusion Middleware component.
Unauthenticated remote exploitation of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 allows network-accessible attackers to achieve complete read access to all application-accessible data, perform limited unauthorized data modification, and cause partial denial of service - all via HTTP with no credentials or user interaction required. The 'Authentication Bypass' tag in multi-source intelligence corroborates the PR:N CVSS metric, indicating the flaw circumvents access controls prior to any authentication gate. No CISA KEV listing or public proof-of-concept has been identified at time of analysis, though the low attack complexity (AC:L) makes opportunistic exploitation feasible once technical details circulate.
Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 within the Fusion Middleware stack expose an unauthenticated remote attack surface over HTTP, enabling network-accessible attackers to perform unauthorized creation, deletion, or modification of critical content data across all accessible WebCenter Sites instances, as well as cause a partial denial of service. The CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) confirms minimal attack complexity with no authentication or user interaction required, which Oracle's own advisory characterizes as 'easily exploitable'. No public exploit or CISA KEV listing has been identified at time of analysis, though the zero-prerequisite exploitation profile elevates urgency for exposed deployments.
Unauthenticated remote exploitation of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 allows network-adjacent or internet-facing attackers to perform unauthorized creation, deletion, or modification of critical content data, and to partially degrade service availability via HTTP. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms that no authentication, user interaction, or special configuration is required, placing this in the highest-risk category for unauthenticated web vulnerabilities. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis, but the low attack complexity warrants prompt remediation.
Oracle WebCenter Content's Content Server component, within the Oracle Fusion Middleware stack, exposes a network-reachable integrity compromise affecting versions 12.2.1.4.0 and 14.1.2.0.0. High-privileged authenticated attackers can access the service via HTTP to arbitrarily create, delete, or modify critical repository data, read a subset of accessible content, and cause partial denial of service - with a confirmed scope change indicating potential cascading impact on additional Oracle Fusion Middleware products. No public exploit code or CISA KEV listing has been identified at time of analysis.
Remote unauthenticated compromise of Oracle WebCenter Enterprise Capture (Fusion Middleware, Client Bundle component) allows an attacker with only network/HTTP reach to create, delete, or modify critical data, read a subset of accessible data, and cause partial denial of service. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected, and Oracle explicitly flags a scope change meaning successful attacks may significantly impact other products beyond Capture itself. Rated CVSS 3.1 9.9; disclosed in the Oracle Critical Patch Update of August 2026 with no public exploit identified at time of analysis.
Cross-scope compromise of Oracle WebCenter Content (Content Server component) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 allows a remote unauthenticated attacker to fully read, create, modify or delete all Content Server-accessible data and cause a partial denial of service. Oracle rates it CVSS 9.6, driven by a scope change (S:C) meaning successful attacks can significantly impact products beyond WebCenter Content itself. Exploitation requires tricking a legitimate user into an action (UI:R); there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Local code execution and data compromise in Oracle PeopleSoft Enterprise PeopleTools (Data Mover component) affects versions 8.61 through 8.63, requiring a highly privileged attacker with physical or logical infrastructure access and human interaction from a secondary party. Successful exploitation results in full confidentiality and integrity compromise of PeopleTools data, potential modification or deletion of critical records, and partial denial of service, with a confirmed scope change that can cascade impact to additional dependent PeopleSoft products. No public exploit code or CISA KEV listing has been identified at time of analysis, but the Oracle CSPU August 2026 advisory confirms this as a patched, vendor-acknowledged vulnerability.
Unauthenticated remote access to Oracle Siebel CRM Integration's REST component (versions 17.0 through 26.6) exposes all CRM integration data to unauthorized disclosure and enables partial denial of service via plain HTTP. The vulnerability requires no credentials, no user interaction, and no special configuration beyond the REST interface being reachable, making it exploitable by any network-adjacent or internet-facing attacker. No public exploit has been identified at time of analysis, but Oracle's Critical Patch Update for August 2026 confirms the issue and its severity classification of CVSS 8.2.
Unauthorized data disclosure and partial service disruption affect Oracle Siebel CRM's Marketing component across versions 17.0 through 26.6, exploitable by a low-privileged authenticated attacker via HTTP without requiring user interaction. The flaw enables complete read access to all data within the Siebel Apps - Marketing scope alongside degraded service availability, as confirmed by Oracle's August 2026 Critical Security Patch Update. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in CISA's Known Exploited Vulnerabilities catalog.
Compromise of Oracle WebCenter Portal's Composer component - versions 12.2.1.4.0 and 14.1.2.0.0 - allows an authenticated low-privilege attacker over HTTP to achieve high-integrity impact, including unauthorized creation, deletion, and modification of critical portal data, limited confidentiality exposure, and partial denial of service. The CVSS scope change (S:C) indicates exploitation can cascade to additional Oracle Fusion Middleware products beyond WebCenter Portal itself. Disclosed in Oracle's August 2026 Critical Security Patch Update; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthorized data access and modification in Oracle General Ledger (E-Business Suite versions 12.2.3-12.2.15) can be achieved by a low-privileged network attacker targeting the Internal Operations component via HTTP. Successful exploitation grants complete read and write access to critical GL financial data plus partial availability disruption - a severe outcome for any organization relying on EBS for financial record integrity. The 'Authentication Bypass' tag suggests the vulnerability allows a low-privileged authenticated user to escalate effective access beyond their authorization level; no public exploit code or CISA KEV listing has been identified at time of analysis.
Denial of service in Amazon ion-java (versions 1.9.0 through 1.11.x) is caused by the GZIP auto-decompression handler failing to enforce any upper bound on decompressed output size (CWE-409), a class of flaw commonly called a decompression bomb or zip bomb. Remote unauthenticated network attackers can submit a specially crafted compressed Ion document that expands to an arbitrarily large payload in memory, exhausting heap resources and crashing or stalling any application that parses untrusted Ion input. The CVSS 4.0 score of 8.7 (AV:N/AC:L/PR:N/UI:N) reflects the low exploitation barrier; no public exploit code or CISA KEV listing has been identified at time of analysis.
Uncontrolled heap memory preallocation in Amazon ion-java's binary Ion stream cursor exposes any application parsing untrusted Ion binary data to remote denial of service. Versions 1.9.0 through 1.11.x are affected; a crafted Ion binary document with an inflated declared-length field forces the JVM to preallocate excessive heap memory before input validation occurs, exhausting available resources and crashing the host service. No public exploit code has been identified, but the CVSS 4.0 vector confirms unauthenticated remote exploitation with low complexity, and a vendor-released patch is available in version 1.12.0.
Heap-based buffer overflow in Open5GS v.2.7.0 allows remote unauthenticated attackers to crash the NAS 5GS decoder chain by sending a NAS PDU with a mutated message type byte, resulting in denial of service to the AMF component and all connected UEs. The vulnerability is network-accessible with no authentication or user interaction required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N), making it trivially reachable from any host with access to the AMF N1 interface. A public proof-of-concept exploit exists, no public exploit identified as confirmed active exploitation (no CISA KEV listing), and no vendor patch has been confirmed at time of analysis.
Memory leak in Open5GS v2.7.0's AMF component allows remote unauthenticated attackers to exhaust process memory and crash the Access and Mobility Management Function via crafted NGAP messages. The vulnerable function ngap_send_to_nas() in src/amf/ngap-path.c fails to release allocated memory (CWE-401), enabling a sustained DoS against the 5G core network's connection management plane. No public exploit confirmation as CISA KEV, but a proof-of-concept gist has been published by the reporter, and the CVSS score of 7.5 with network vector and no authentication requirement reflects meaningful real-world risk for exposed deployments.
Privilege escalation and authorization bypass in Netflix Lemur before 1.9.3 permits any authenticated non-read-only user to revoke arbitrary TLS certificates fleet-wide, causing denial of service across all managed endpoints. Two chained API flaws - an unchecked upload endpoint and a row-scoped revocation check - allow an attacker to manufacture a shadow Lemur database record aliasing any real CA-side certificate, then trigger the issuer plugin to revoke the genuine certificate using stored authority credentials. No public exploit code has been identified, but the attack path is fully disclosed in the GitHub security advisory GHSA-pxmc-2ffp-8j67 and the fix commit.
Denial of service in NVIDIA Triton Inference Server for Linux exposes AI inference infrastructure to remote disruption through improper input validation. Unauthenticated network attackers can crash or render unresponsive the inference server by submitting malformed inputs, with CVSS 7.5 (AV:N/AC:L/PR:N/UI:N) confirming no authentication or user interaction is required. No public exploit code has been identified at time of analysis, and CISA KEV listing is absent, but the low attack complexity and zero-authentication requirement make this a meaningful availability risk for any Triton deployment reachable from untrusted networks.
Unbounded resource allocation in NVIDIA Triton Inference Server for Linux allows remote, unauthenticated attackers to exhaust server-side resources and cause denial of service against all tracked versions (CPE wildcard). The CVSS 7.5 High rating reflects a fully network-accessible attack path with no privileges or user interaction required, making the exposure surface broad for any Triton deployment reachable from untrusted networks. No public exploit code has been identified at time of analysis, and exploitation has not been confirmed by CISA KEV.
Path traversal in NVIDIA Triton Inference Server for Linux (CWE-22) lets remote attackers manipulate file paths to reach locations outside intended directories, with the vendor citing denial of service as the primary outcome. NVIDIA assigned a critical 9.8 CVSS score claiming full confidentiality, integrity, and availability impact, though the published description only asserts DoS. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Heap buffer overflow in the baresip 'libre' real-time communications library (versions prior to 4.8.1) lets remote attackers corrupt heap memory or crash any application running a WebSocket server via websock_accept()/websock_accept_proto(). The websock_decode() function miscalculates frame bounds for 64-bit extended-length masked frames, and the out-of-bounds XOR unmasking write is attacker-controlled. No public exploit identified at time of analysis, but the flaw is network-reachable and unauthenticated per the CVSS vector.
CPU exhaustion in Wazuh Manager 4.0.0-4.14.6 and 5.0.0-beta2 allows authenticated API users with the allow_run_as permission to fully deny service to all other API consumers by submitting arbitrarily deeply nested JSON to the POST /security/user/authenticate/run_as endpoint. The API framework processes these structures recursively without any depth or size limit, consuming CPU proportionally to nesting depth until the process becomes unresponsive. No public exploit identified at time of analysis, though the attack primitive is trivially constructible from the CVE description alone.
Path traversal in Wazuh Manager 4.0.0 through 4.14.5 allows unauthenticated remote attackers to destroy the manager's queue directory structure and halt all Wazuh services by registering an agent whose name begins with a dot (e.g., ".."). Two compounding weaknesses drive the impact: OS_IsValidName() failed to reject dot-prefixed agent names, and delete_diff() performs unsafe path concatenation that resolves the traversal sequence to the parent queue directory, wiping its subdirectories. Recovery requires manual intervention, creating a complete and sustained loss of SIEM and XDR visibility. No public exploit or CISA KEV listing has been identified at time of analysis.
Unbounded HTTP request payload processing in OpenSearch Dashboards' capabilities route handler allows unauthenticated remote attackers to exhaust server resources and cause a denial of service. Affected products span both self-hosted OpenSearch Dashboards (all versions per CPE) and Amazon OpenSearch Service. The CVSS 4.0 score of 8.7 with AV:N/AC:L/AT:N/PR:N/UI:N reflects low attack complexity and no authentication prerequisite, making any network-exposed instance potentially reachable. No public exploit or CISA KEV listing has been identified at time of analysis, and a vendor-released patch is available.
Account takeover in authentik (goauthentik) identity provider before 2026.2.6 and 2026.5.5 allows an attacker holding an account on an upstream SAML identity provider to hijack a victim's authentik account. By injecting an XML comment into the SAML NameID (e.g. victim<!--x-->attacker), the value authentik reads for user matching is truncated to the text before the comment while the IdP's signed assertion still validates, because comment-excluding canonicalization (xml-exc-c14n) strips the comment before the signature digest is computed. This binds the attacker's external identity to the victim's existing account without the victim's password or the IdP private key, and the malicious link persists across future logins. No public exploit identified at time of analysis; the flaw is fixed upstream and demonstrated by regression tests in the vendor patch.
Buffer overflow in Dell PowerStore SDNAS's NFS/RPC subsystem exposes the entire PowerStore appliance line (500T through 7000T and beyond) to unauthenticated remote exploitation. The CWE-120 flaw in the RPC request handler allows an unauthenticated network attacker to achieve arbitrary command execution or denial of service against the NAS service. The CVSS 8.1 score is tempered by High Attack Complexity (AC:H), indicating exploitation requires non-trivial payload engineering rather than a simple spray-and-pray approach; no public exploit code and no CISA KEV listing have been identified at time of analysis.