CVE-2026-79956Published
Improper Sanitization leads to Command Injection in AOS-8 Web Interface
cve-program ·
Vendor product: ArubaOS (AOS)
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694346 source statements · aliases may refer to the same vulnerabilityCVE-2026-95704Published
Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95705Published
Authenticated Command Injection Vulnerabilities in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95706Published
Authenticated Command Injection Vulnerabilities in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95707Published
Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95708Published
Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95709Published
Authenticated Command Injection Vulnerabilities in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95711Published
Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95714Published
Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79852Published
Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-93640Published
Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-101809Published
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with netw…
cve-program ·
Vendor product: Workflow
CVE-2026-101736Published
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows unauthenticated attacker with net…
cve-program ·
Vendor product: Primavera Unifier
RUSTSEC-2026-0387Published
Multiple timing variability issues in operations intended to be constant-time
osv ·
crates.io: crypto-bigint
CVE-2026-91504Published
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privile…
cve-program ·
Vendor product: Oracle WebCenter Content
CVE-2026-91503Published
Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privileg…
cve-program ·
Vendor product: Oracle Database Server
CVE-2026-91502Published
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthe…
cve-program ·
Vendor product: Oracle WebLogic Server
CVE-2026-91501Published
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker w…
cve-program ·
Vendor product: Oracle Identity Manager
CVE-2026-91499Published
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via O…
cve-program ·
Vendor product: Oracle Database Server
CVE-2026-91496Published
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with net…
cve-program ·
Vendor product: Workflow
CVE-2026-91494Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenti…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91493Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthentica…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91492Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticate…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91489Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileg…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91488Published
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileg…
cve-program ·
Vendor product: Oracle Identity Manager Connector
CVE-2026-91487Published
Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Ent…
cve-program ·
Vendor product: Oracle Java SE
CVE-2026-91486Published
Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: PeopleSoft Enterprise FIN General Ledger Brazil
CVE-2026-91485Published
Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows high privileged attacker wi…
cve-program ·
Vendor product: PeopleSoft Enterprise FIN Cash Management
CVE-2026-91484Published
Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure wh…
cve-program ·
Vendor product: Oracle Java SE
CVE-2026-91483Published
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with log…
cve-program ·
Vendor product: Oracle Outside In Technology
CVE-2026-91482Published
Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacke…
cve-program ·
Vendor product: PeopleSoft Enterprise SCM Strategic Sourcing
CVE-2026-91481Published
Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with…
cve-program ·
Vendor product: PeopleSoft Enterprise SCM Purchasing
CVE-2026-91480Published
Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker…
cve-program ·
Vendor product: PeopleSoft Enterprise SCM Strategic Sourcing
CVE-2026-91479Published
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment att…
cve-program ·
Vendor product: Oracle Database Server
CVE-2026-91477Published
Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network acces…
cve-program ·
Vendor product: Oracle JavaFX
CVE-2026-91475Published
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attac…
cve-program ·
Vendor product: Oracle Outside In Technology
CVE-2026-91473Published
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
cve-program ·
Vendor product: Oracle HTTP Server
CVE-2026-91471Published
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated att…
cve-program ·
Vendor product: PeopleSoft Enterprise CC Common Application Objects
CVE-2026-91467Published
Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows physical access …
cve-program ·
Vendor product: Oracle Fusion Middleware Control
CVE-2026-91465Published
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker…
cve-program ·
Vendor product: PeopleSoft Enterprise FIN Common Objects Argentina
CVE-2026-94422Published
xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
cve-program ·
https://github.com/flatpak/xdg-dbus-proxy: xdg-dbus-proxy · https://bodhi.fedoraproject.org/updates/?packages=xdg-dbus-proxy: xdg-dbus-proxy · https://access.redhat.com/downloads/content/package-browser/: xdg-dbus-proxy
CVE-2026-91464Published
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 2…
cve-program ·
Vendor product: Oracle Java SE · Vendor product: Oracle GraalVM for JDK · Vendor product: Oracle GraalVM Enterprise Edition
CVE-2026-91463Published
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 2…
cve-program ·
Vendor product: Oracle Java SE · Vendor product: Oracle GraalVM for JDK · Vendor product: Oracle GraalVM Enterprise Edition
CVE-2026-91462Published
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 2…
cve-program ·
Vendor product: Oracle Java SE · Vendor product: Oracle GraalVM for JDK · Vendor product: Oracle GraalVM Enterprise Edition
CVE-2026-91461Published
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 2…
cve-program ·
Vendor product: Oracle Java SE · Vendor product: Oracle GraalVM for JDK · Vendor product: Oracle GraalVM Enterprise Edition
CVE-2026-91460Published
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attac…
cve-program ·
Vendor product: Oracle Outside In Technology
CVE-2026-91459Published
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attac…
cve-program ·
Vendor product: Oracle Outside In Technology
CVE-2026-91458Published
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with log…
cve-program ·
Vendor product: Oracle Outside In Technology
CVE-2026-91457Published
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attac…
cve-program ·
Vendor product: Oracle Outside In Technology
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.