CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.03)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-101812
Medium

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV), affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data accessible in the product.

CVE-2026-101807
Medium

Vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server), affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

CVE-2026-101806
Medium

Vulnerability in the MySQL Connectors product (component: Connector/ODBC), affecting version 26.7.1. A difficult-to-exploit flaw allows a low-privileged attacker with network access via multiple protocols to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data accessible in MySQL Connectors.

CVE-2026-101803
Medium

Vulnerability in the MySQL Server, MySQL Cluster product (component: Server: XML), affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. An easily exploitable flaw allows a high-privileged attacker with network access via multiple protocols to gain unauthorized creation, deletion, or modification access to critical data and to cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101802
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Parser) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a low-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.

CVE-2026-101801
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a high-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.

CVE-2026-101800
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Security: Privileges) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Difficult to exploit, it allows a low-privileged attacker with network access to create, delete or modify critical data and gain full access to all accessible data.

CVE-2026-101799
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Group Replication GCS) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by an unauthenticated attacker with access to the physical communication segment, allowing a hang or frequently repeatable crash (complete DoS) of the server.

CVE-2026-101798
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a high-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.

CVE-2026-101795
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Components Services) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a high-privileged attacker with logon to the infrastructure, allowing takeover of the database server.

CVE-2026-101794
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: XML) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a low-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.

CVE-2026-101793
Medium

Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component Core) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable by a low-privileged attacker with logon to the infrastructure, allowing unauthorized access to critical data or complete access to all accessible data.

CVE-2026-101792
Medium

Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component Security) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit, it allows an unauthenticated attacker with access to the physical communication segment to create, delete or modify critical data and read a subset of accessible data.

CVE-2026-101789
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a low-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.

CVE-2026-101788
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Components Services) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A difficult-to-exploit network attack can cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101787
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101784
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101782
Medium

Vulnerability in Oracle Applications Manager of Oracle E-Business Suite (component Oracle Diagnostics Interfaces) affects versions 12.2.3-12.2.15. An easily exploitable HTTP attack by a low-privileged user can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data.

CVE-2026-101780
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: X Plugin) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a low-privileged user can cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101778
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Components Services) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a low-privileged user can cause a hang or frequently repeatable crash (complete DoS).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS