CVE-2026-92776Published
Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypass
cve-program ·
Vendor product: Wiki.js
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699236 source statements · aliases may refer to the same vulnerabilityCVE-2026-54520Published
AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory
cve-program ·
Vendor product: ai-agent-automation
CVE-2026-54646Published
CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php
cve-program ·
Vendor product: v6
CVE-2026-92619Published
Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter
cve-program ·
Vendor product: Booking Calendar
CVE-2026-92771Published
Twenty before 2.35.0 Permission Bypass via groupBy-with-records Query
cve-program ·
Vendor product: twenty
CVE-2026-92762Published
Pelican Panel before 1.0.0-beta35 Authorization Bypass via Startup
cve-program ·
Vendor product: panel
CVE-2026-92753Published
PatrowlManager through 1.8.4 Authorization Bypass via Events API
cve-program ·
Vendor product: PatrowlManager
CVE-2026-92748Published
BC Security Empire before 6.7.1 Path Traversal File Upload RCE
cve-program ·
Vendor product: Empire
CVE-2026-83143Published
Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access…
cve-program ·
Vendor product: Siebel Apps - Life Sciences
CVE-2026-83144Published
Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker wi…
cve-program ·
Vendor product: Siebel Apps - Customer Order Management
CVE-2026-83145Published
Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker wi…
cve-program ·
Vendor product: Siebel Apps - Customer Order Management
CVE-2026-83146Published
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP …
cve-program ·
Vendor product: Siebel CRM End User
CVE-2026-83152Published
Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Project Intelligence
CVE-2026-83174Published
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Application Framework). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged att…
cve-program ·
Vendor product: Oracle CRM Technical Foundation
CVE-2026-83177Published
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with net…
cve-program ·
Vendor product: Oracle One-to-One Fulfillment
CVE-2026-83218Published
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network…
cve-program ·
Vendor product: Siebel CRM Deployment
CVE-2026-83219Published
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to t…
cve-program ·
Vendor product: Siebel CRM Deployment
CVE-2026-83220Published
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe). Supported versions that are affected are 23.6-26.7. Easily exploitable vulnerability allows unauthenticated attacker with ac…
cve-program ·
Vendor product: Siebel CRM Integration
CVE-2026-83264Published
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with…
cve-program ·
Vendor product: Oracle Product Lifecycle Analytics
CVE-2026-83278Published
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-neo4j). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated atta…
cve-program ·
Vendor product: Helidon
CVE-2026-83285Published
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker…
cve-program ·
Vendor product: Oracle Business Intelligence Enterprise Edition
CVE-2026-83297Published
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged…
cve-program ·
Vendor product: Oracle BI Publisher
CVE-2026-83304Published
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vuln…
cve-program ·
Vendor product: Oracle Business Intelligence Enterprise Edition
CVE-2026-83307Published
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged…
cve-program ·
Vendor product: Oracle BI Publisher
CVE-2026-83310Published
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged…
cve-program ·
Vendor product: Oracle BI Publisher
CVE-2026-83412Published
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privilege…
cve-program ·
Vendor product: Oracle Coherence
CVE-2026-83418Published
Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affected are 26.1.200 and 25.2.201. Difficult to exploit vulnerabi…
cve-program ·
Vendor product: Oracle Communications Cloud Native Core Security Edge Protection Proxy
CVE-2026-83422Published
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attac…
cve-program ·
Vendor product: Oracle Identity Manager
CVE-2026-83428Published
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attac…
cve-program ·
Vendor product: Oracle Demand Signal Repository
CVE-2026-83429Published
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attac…
cve-program ·
Vendor product: Oracle Demand Signal Repository
CVE-2026-83430Published
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker wit…
cve-program ·
Vendor product: Oracle Product Workbench
CVE-2026-83432Published
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Depot Repair
CVE-2026-83433Published
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker wi…
cve-program ·
Vendor product: Oracle Depot Repair
CVE-2026-83434Published
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker wit…
cve-program ·
Vendor product: Oracle Product Workbench
CVE-2026-83435Published
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.13-12.2.15. Difficult to exploit vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Bills of Material
CVE-2026-83438Published
Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with ne…
cve-program ·
Vendor product: Oracle Engineering
CVE-2026-83439Published
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Easily exploitable vulnerability allows low privil…
cve-program ·
Vendor product: Helidon
CVE-2026-83441Published
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with ne…
cve-program ·
Vendor product: Oracle Product Hub
CVE-2026-83446Published
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attack…
cve-program ·
Vendor product: Oracle Financials Common Modules
CVE-2026-83447Published
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker wit…
cve-program ·
Vendor product: Oracle Bills of Material
CVE-2026-83448Published
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker wit…
cve-program ·
Vendor product: Oracle Bills of Material
CVE-2026-83455Published
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attac…
cve-program ·
Vendor product: Oracle Demand Signal Repository
CVE-2026-83477Published
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access …
cve-program ·
Vendor product: Oracle Work in Process
CVE-2026-83491Published
Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with …
cve-program ·
Vendor product: Oracle iRecruitment
CVE-2026-87125Published
Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged at…
cve-program ·
Vendor product: Oracle Financials for Asia/Pacific
CVE-2026-87130Published
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthentica…
cve-program ·
Vendor product: Oracle Hyperion Data Relationship Management
CVE-2026-63325Published
Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`
cve-program ·
Vendor product: redocly-cli
CVE-2026-92473Published
GPAC BIFS commands.c gf_sg_command_del use after free
cve-program ·
Vendor product: GPAC
CVE-2026-82399Published
CoreDNS: Unauthenticated memory exhaustion in custom transports
cve-program ·
Vendor product: coredns
CVE-2026-75516Published
RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement
cve-program ·
Vendor product: rabbitmq-java-client
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.