CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.26)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-87150
High

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench), affecting versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can achieve takeover of Oracle Bills of Material.

CVE-2026-87149
High

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO), affecting versions 12.2.8-12.2.15. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and unauthorized update, insert or delete access to some data.

CVE-2026-87148
High

Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DOS) of the application.

CVE-2026-87147
High

Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. A high privileged attacker with network access via HTTP can gain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data, and attacks may significantly impact additional products.

CVE-2026-87146
High

Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and unauthorized update, insert or delete access to some data.

CVE-2026-87145
High

Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized update, insert or delete access to some data, unauthorized read access to a subset of data, and cause a partial denial of service (partial DOS).

CVE-2026-87144
High

Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. A low privileged attacker with network access via HTTP requires human interaction and can gain unauthorized access to critical data and unauthorized update, insert or delete access to some data, and attacks may significantly impact additional products.

CVE-2026-87143
High

Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can gain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data.

CVE-2026-87142
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An unauthenticated attacker with network access via HTTPS can exploit it, but human interaction is required. Successful exploitation can result in unauthorized creation, deletion, or modification of critical data and partial denial of service.

CVE-2026-87141
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data. The vulnerability may also impact additional products (scope change).

CVE-2026-87140
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can take over the system, though exploitation is difficult. Impact covers confidentiality, integrity, and availability.

CVE-2026-87139
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can take over the system, though exploitation is difficult. Impact covers confidentiality, integrity, and availability.

CVE-2026-87138
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An unauthenticated attacker with network access via SOAP can cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-87137
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to and modify critical data, but human interaction is required. The vulnerability may also impact additional products (scope change).

CVE-2026-87136
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.

CVE-2026-87135
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data.

CVE-2026-87134
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via TCP can gain unauthorized access to critical data or all accessible data. The vulnerability may also impact additional products (scope change).

CVE-2026-87133
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A high-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data. The vulnerability may also impact additional products (scope change).

CVE-2026-87132
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system, but requires human interaction from another person. It can lead to unauthorized access to critical data and modification, and may impact additional products (scope change).

CVE-2026-87131
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system, but requires human interaction from another person. It can lead to unauthorized access to critical data and modification, and may impact additional products (scope change).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS