920
CVEs
143
Critical
529
High
0
KEV
9
PoC
665
Unpatched C/H
2.2%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
143
HIGH
529
MEDIUM
210
LOW
38
Monthly CVE Trend
Affected Products (30)
MySQL
1197
Java
1024
Debian Linux
906
Oncommand Insight
757
Jre
747
Jdk
739
Ubuntu Linux
726
Fedora
595
Oncommand Workflow Automation
590
Active Iq Unified Manager
543
Solaris
496
Snapcenter
495
Opensuse
484
Enterprise Linux Server
413
Enterprise Linux Workstation
413
Enterprise Linux Desktop
410
Vm Virtualbox
404
Enterprise Linux Server Aus
394
Enterprise Linux Eus
363
Enterprise Linux Server Tus
348
Leap
333
Peoplesoft Enterprise Peopletools
329
MariaDB
327
Weblogic Server
288
E Business Suite
284
Mysql Server
283
Fusion Middleware
249
Enterprise Linux
233
Database Server
209
Outside In Technology
190
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-30156 | Broken cryptography in Ceph's CephX authentication subsystem enables credential scope escalation and plaintext inference for any network-adjacent attacker holding a compromised Ceph account. CephX employed AES-CBC with a hardcoded initialization vector and no message authentication code, making encrypted authentication traffic both deterministic (identical plaintexts yield identical ciphertexts) and malleable (bit-flip attacks alter decrypted credential payloads undetected). Fixed in Ceph Tentacle 20.2.4 and Squid 19.2.6 by replacing the scheme with AES-256-CTS-HMAC-SHA384-192; no public exploit has been identified at time of analysis. | HIGH | 8.9 | 0.1% | 65 |
PoC
No patch
|
| CVE-2026-55509 | Blind SQL injection in WsgiDAV's MySQLBrowserProvider sample module (versions <= 4.3.4) allows unauthenticated network attackers to read arbitrary data from the backing MySQL database via URL path manipulation. The record key segment of the URL is concatenated directly into a WHERE clause without escaping, enabling a boolean status-code oracle that supports full character-by-character data extraction. A secondary typo in the numeric-type check (`INTT` instead of `INT`) ensures all primary key types take the vulnerable quoted branch, and a working PoC with complete extraction script has been publicly confirmed. No public exploit identified as confirmed actively exploited (CISA KEV), but the PoC lowers the exploitation bar significantly. | HIGH | 8.8 | 0.4% | 64 |
PoC
|
| CVE-2026-63642 | Unauthenticated Server-Side Request Forgery in MagicMirror² versions prior to 2.37.0 allows any network-reachable attacker to weaponize the smart mirror as an internal network probe. By connecting to the unguarded Socket.IO `/newsfeed` namespace and emitting a `CHECK_ARTICLE_URL` notification with an attacker-controlled URL, the server performs an unsanitized `fetch()` HEAD request and returns timing and framing data via `ARTICLE_URL_STATUS`, creating a boolean-plus-timing oracle for internal host and port enumeration. A proof-of-concept exploit is documented in the GHSA advisory; no confirmed active exploitation (CISA KEV) has been reported. | MEDIUM | 6.3 | 0.4% | 52 |
PoC
|
| CVE-2026-70921 | Authentication bypass in Oracle Hyperion Financial Management 11.2.25.0.000 (Security component) lets a remote, unauthenticated attacker reach the application over TLS and read or alter all data the product can access, with a scope-changing blast radius into adjacent Oracle products. Rated CVSS 10.0, it is trivially exploitable (AV:N/AC:L/PR:N/UI:N) and delivers full confidentiality and integrity compromise while leaving availability untouched. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the perfect score and unauthenticated network reach make it a top-priority patch. | CRITICAL | 10.0 | 0.4% | 50 |
No patch
|
| CVE-2026-61241 | Complete takeover of Oracle Internet Directory (OID) is possible in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 through its OID LDAP Server component, where an unauthenticated remote attacker with LDAP network access can fully compromise the directory service. Rated CVSS 10.0 with a scope change (S:C), successful exploitation can pivot beyond OID to significantly impact additional products that depend on it. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the maximum severity and identity-infrastructure role make this a top-priority patch. | CRITICAL | 10.0 | 0.4% | 50 |
No patch
|
| CVE-2026-70880 | Complete takeover of Oracle Hyperion Data Relationship Management 11.2.25.0.000 is possible by remote, unauthenticated attackers over TCP, per Oracle's August 2026 Critical Patch Update. The flaw sits in the Access and security component and carries a maximum CVSS 3.1 base score of 10.0 with a scope change, meaning successful exploitation can reach beyond DRM into additional connected products. No public exploit code has been identified at time of analysis, but the trivial exploitability (no authentication, low complexity) makes this a top-priority patch. | CRITICAL | 10.0 | 0.4% | 50 |
No patch
|
| CVE-2026-61003 | Full takeover of Oracle Managed File Transfer (Oracle Fusion Middleware, MFT Runtime Server) is possible when a low-privileged attacker with network access reaches the T3 or IIOP protocol interface. The flaw carries a CVSS 3.1 base score of 9.9 and, critically, involves a scope change (S:C) so successful attacks may significantly impact additional products beyond MFT itself. No public exploit has been identified at time of analysis and the issue is not listed in CISA KEV, but the low attack complexity, low privilege requirement, and network exposure via WebLogic-style T3/IIOP make it a high-priority patch. | CRITICAL | 9.9 | 0.5% | 50 |
No patch
|
| CVE-2026-60702 | Remote takeover of Oracle WebLogic Server is possible when a low-privileged attacker reaches the server over the T3 or IIOP protocols, abusing a flaw in the Core component to fully compromise the host. Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 are affected, and because the attack carries a scope change it can significantly impact products beyond WebLogic itself. Oracle rates it CVSS 9.9; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the CVSS profile matches historically weaponized WebLogic T3/IIOP deserialization bugs. | CRITICAL | 9.9 | 0.5% | 50 |
No patch
|
| CVE-2026-61206 | Privilege-escalating account takeover in Oracle Hyperion Calculation Manager 11.2.25.0.000 (Security component) lets a low-privileged, network-adjacent attacker send crafted HTTP requests that fully compromise the product and, because of a CVSS scope change, spill impact into additional connected Oracle Hyperion products. Oracle rates it CVSS 3.1 9.9 with full confidentiality, integrity, and availability loss; it was disclosed in Oracle's August 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV. | CRITICAL | 9.9 | 0.5% | 50 |
No patch
|
| CVE-2026-61317 | Privilege-based takeover of Oracle Siebel CRM Cloud Applications (versions 22.3 through 26.6) is possible via the Siebel Cloud Manager component, where a low-privileged attacker with HTTP network access can fully compromise the application. Because the flaw carries a scope change, successful attacks can significantly impact additional connected products beyond Siebel itself. Rated CVSS 3.1 9.9 with full confidentiality, integrity, and availability impact; no public exploit identified at time of analysis. | CRITICAL | 9.9 | 0.5% | 50 |
No patch
|
| CVE-2026-70920 | Privilege escalation to full takeover in Oracle Hyperion Financial Management 11.2.25.0.000 (Security component) lets a low-privileged attacker with network access, operating over the SQL layer, fully compromise the application and - because of a scope change - significantly impact other connected products. Oracle rates it CVSS 3.1 9.9 with high confidentiality, integrity, and availability impact. No public exploit code has been identified and it is not on CISA KEV, but the low complexity and low privilege bar make it a top-priority patch item. | CRITICAL | 9.9 | 0.5% | 50 |
No patch
|
| CVE-2026-60720 | Full compromise of Oracle Identity Manager (OIM Legacy UI component) in Oracle Fusion Middleware 12.2.1.4.0 and 14.1.2.1.0 is achievable by a low-privileged attacker over HTTP, resulting in complete takeover of the OIM instance. Because the flaw carries a scope change, successful exploitation can significantly impact additional connected products beyond OIM itself, elevating this from a single-product compromise to a potential identity-fabric breach. Disclosed in Oracle's August 2026 Critical Patch Update with a CVSS 3.1 base score of 9.9; no public exploit identified at time of analysis. | CRITICAL | 9.9 | 0.4% | 50 |
No patch
|
| CVE-2026-60730 | Privilege-escalating account/system takeover in Oracle WebCenter Portal (Fusion Middleware, Composer component) versions 12.2.1.4.0 and 14.1.2.0.0 lets an authenticated low-privileged attacker reach full compromise over HTTP. Because the flaw carries a scope change (S:C), successful exploitation can pivot beyond WebCenter Portal to impact additional products, and Oracle rates it CVSS 9.9. No public exploit identified at time of analysis, but the near-maximum score, low attack complexity, and minimal privilege requirement make it a top-tier patch priority. | CRITICAL | 9.9 | 0.4% | 50 |
No patch
|
| CVE-2026-62512 | Privilege escalation to full takeover in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component, versions 22.3 through 26.6) lets a low-privileged attacker with only HTTP network access fully compromise the application and, because of a scope change, meaningfully impact additional connected products. Oracle rates it CVSS 3.1 9.9 with high confidentiality, integrity, and availability impact; it was disclosed in the Oracle Critical Patch Update of August 2026. No public exploit identified at time of analysis, and it is not listed in CISA KEV. | CRITICAL | 9.9 | 0.4% | 50 |
No patch
|
| CVE-2026-62588 | Full compromise of Oracle Siebel CRM Integration (Open Integration component) is achievable by a low-privileged, network-based attacker over HTTP, with a scope change that lets attacks significantly impact additional products beyond the vulnerable component. Affected releases span 25.12 through 26.6, and Oracle rates it CVSS 3.1 9.9 with full confidentiality, integrity, and availability loss (component takeover). There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the combination of low attack complexity, low privilege requirement, and scope change makes it a top-tier patch priority. | CRITICAL | 9.9 | 0.4% | 50 |
No patch
|