CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.09)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-71087
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Easily exploitable by unauthenticated attacker over network (HTTP). Successful attack can allow unauthorized read access to a subset of data.

CVE-2026-71085
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (HTTP). Successful attack can allow full access to data.

CVE-2026-71084
Medium

Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by unauthenticated attacker with local access. Successful attack can cause complete DoS and unauthorized read access to data.

CVE-2026-71083
Low

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A high-privileged attacker with logon access can gain unauthorized read access to a subset of data. Requires user interaction and is difficult to exploit.

CVE-2026-71082
Low

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A low-privileged attacker with logon access can gain unauthorized read access to a subset of data. Difficult to exploit.

CVE-2026-71081
Low

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A high-privileged attacker with logon access can gain unauthorized update, insert, or delete access to some data. Difficult to exploit.

CVE-2026-71080
Low

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An unauthenticated attacker with access to the physical communication segment can gain unauthorized update, insert, delete, and read access to some data. Requires user interaction and is difficult to exploit.

CVE-2026-71079
Medium

Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by low-privileged attacker over network (multiple protocols). Successful attack can cause complete DoS.

CVE-2026-71078
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw requires login and user interaction; a low-privileged attacker can gain unauthorized access to data and cause partial denial of service.

CVE-2026-71077
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to system data.

CVE-2026-71076
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows an unauthenticated attacker over HTTP to gain unauthorized read access to a subset of system data.

CVE-2026-71075
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to data and modify it.

CVE-2026-71074
Critical

Vulnerability in Oracle Fusion Middleware Helidon (Imperative Web Server component) affects versions 1.0.0-1.4.19 and 3.0.0-3.2.17. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to take over Helidon. CVSS score 9.8.

CVE-2026-71073
Medium

Vulnerability in MySQL Connectors (Connector/ODBC component) version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a complete denial of service (hang or frequent crashes).

CVE-2026-71072
Low

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A low-privileged attacker with logon access can cause a partial denial of service. Easily exploitable.

CVE-2026-71071
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows a low-privileged attacker with physical access to the communication segment to gain unauthorized modification and read access to a subset of data.

CVE-2026-71070
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. A low-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.

CVE-2026-71069
High

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) affects version 3.6. A low-privileged attacker via HTTP, under difficult conditions, can take over the system.

CVE-2026-71068
High

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) affects version 3.6. An unauthenticated attacker via HTTP, under difficult conditions, can take over the system.

CVE-2026-71067
High

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) affects version 3.6. A low-privileged attacker via HTTP can easily take over the system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS