CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.08.31)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-60464
High

Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.

CVE-2026-60462
High

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to take over the system.

CVE-2026-60454
High

Vulnerability in Oracle HTTP Server (Core component) allows a low-privileged attacker with local access to easily take over the server.

CVE-2026-60452
High

Vulnerability in WebCenter Content: Imaging (component: Core) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it, also impacting other products.

CVE-2026-60451
High

Vulnerability in WebCenter Content: Imaging (component: Core) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it.

CVE-2026-60450
High

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to take over the system.

CVE-2026-60449
High

Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with local access can gain full access to all data stored in WebCenter Content, and the attack may impact other products (scope change).

CVE-2026-60448
High

Vulnerability in Oracle WebCenter Content (Fusion Middleware). Difficult to exploit, unauthenticated attacker via HTTP can compromise data confidentiality and integrity, affecting other products.

CVE-2026-60444
High

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it, also impacting other products.

CVE-2026-60443
High

Vulnerability in Oracle WebCenter Content (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.

CVE-2026-60440
High

Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler). A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or full access to all platform data.

CVE-2026-60437
High

Vulnerability in Oracle Fusion Middleware Oracle Unified Directory product (OUD Core component). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable by authenticated high-privileged attacker via LDAP. Can lead to unauthorized data modification and complete denial of service (DOS).

CVE-2026-60436
High

Vulnerability in Oracle Unified Directory (Fusion Middleware). Unauthenticated attacker via LDAP can cause a complete denial of service (DOS).

CVE-2026-60431
High

Vulnerability in Oracle HTTP Server (component: mod_proxy) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can gain full access to critical data, also impacting other products.

CVE-2026-60430
High

Vulnerability in Oracle Unified Directory (OUD Core component) allows a low-privileged attacker to take over the system over the network via LDAP. Versions 12.2.1.4.0 and 14.1.2.1.0 are affected.

CVE-2026-60428
High

Vulnerability in Oracle Unified Directory (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows an unauthenticated attacker via LDAP to gain unauthorized access to critical data and modify it.

CVE-2026-60427
High

Vulnerability in Oracle Unified Directory (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit, allows an unauthenticated attacker via LDAP to gain unauthorized access and modification of critical data, with possible impact on other products.

CVE-2026-60426
High

Vulnerability in Oracle Unified Directory (OUD Core component) allows a low-privileged attacker with network access via LDAP to gain unauthorized access to critical data and modify some data. The attack may impact additional products (scope change).

CVE-2026-60425
High

Vulnerability in Oracle Unified Directory (OUD Core component) allows an unauthenticated attacker with network access via LDAP to cause a complete denial of service (DOS) through hangs or frequent crashes.

CVE-2026-60423
High

Vulnerability in Oracle Fusion Middleware's Oracle Unified Directory product (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via LDAP to compromise Oracle Unified Directory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS