CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.09)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-70886
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by a low-privileged attacker via network (HTTP), allowing takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 score: 8.8 (Confidentiality, Integrity and Availability impacts).

CVE-2026-70885
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the system. Attacks may impact additional products (scope change).

CVE-2026-70884
Critical

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) allows an unauthenticated attacker with network access via SOAP to gain unauthorized access to data and modify it. The attack requires no user interaction.

CVE-2026-70883
Critical

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to data and modify it. The attack requires no user interaction.

CVE-2026-70882
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw requires user interaction and allows a low-privileged attacker to gain unauthorized access to and modify data. Attacks may impact additional products (scope change).

CVE-2026-70881
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to and modify data.

CVE-2026-70880
Critical

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP, potentially impacting other products.

CVE-2026-70879
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw requires logon to the infrastructure and allows a low-privileged attacker to take over the system. Attacks may impact additional products (scope change).

CVE-2026-70878
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to and modify data.

CVE-2026-70877
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over the system.

CVE-2026-70876
Critical

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. A high privileged attacker can remotely compromise the system via HTTPS, potentially impacting other products.

CVE-2026-70875
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the system.

CVE-2026-70874
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over the system.

CVE-2026-70873
Critical

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP.

CVE-2026-70872
Critical

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely access and modify data via HTTP.

CVE-2026-70871
Critical

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP.

CVE-2026-70870
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Web Client - Unicode) version 11.2.23.0.000. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to data and cause a partial denial of service.

CVE-2026-70868
High

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to take over the system.

CVE-2026-70867
High

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. An unauthenticated attacker with access to the physical communication segment can compromise the system. Successful attacks may result in unauthorized access to critical data or complete access to all data, as well as unauthorized modification of some data.

CVE-2026-70866
High

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A low-privileged attacker with Load Testing for Web Apps privilege and local access can compromise the system. Successful attacks may result in full takeover of Oracle Application Testing Suite.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS