CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.30)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-70891
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).

CVE-2026-70890
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).

CVE-2026-70889
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).

CVE-2026-70887
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data, as well as unauthorized update, insert, or delete of some data. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).

CVE-2026-70886
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by a low-privileged attacker via network (HTTP), allowing takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 score: 8.8 (Confidentiality, Integrity and Availability impacts).

CVE-2026-70885
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the system. Attacks may impact additional products (scope change).

CVE-2026-70882
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw requires user interaction and allows a low-privileged attacker to gain unauthorized access to and modify data. Attacks may impact additional products (scope change).

CVE-2026-70881
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to and modify data.

CVE-2026-70879
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw requires logon to the infrastructure and allows a low-privileged attacker to take over the system. Attacks may impact additional products (scope change).

CVE-2026-70878
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to and modify data.

CVE-2026-70877
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over the system.

CVE-2026-70875
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the system.

CVE-2026-70874
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over the system.

CVE-2026-70870
High

Vulnerability in Oracle Hyperion Data Relationship Management (component: Web Client - Unicode) version 11.2.23.0.000. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to data and cause a partial denial of service.

CVE-2026-70868
High

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to take over the system.

CVE-2026-70867
High

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. An unauthenticated attacker with access to the physical communication segment can compromise the system. Successful attacks may result in unauthorized access to critical data or complete access to all data, as well as unauthorized modification of some data.

CVE-2026-70866
High

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A low-privileged attacker with Load Testing for Web Apps privilege and local access can compromise the system. Successful attacks may result in full takeover of Oracle Application Testing Suite.

CVE-2026-70865
High

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A low-privileged attacker with Load Testing for Web Apps privilege and network access via HTTPS can compromise the system, but exploitation is difficult. Successful attacks may result in full takeover of Oracle Application Testing Suite.

CVE-2026-70864
High

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A low-privileged attacker with Load Testing for Web Apps privilege and network access via HTTP can compromise the system, but requires user interaction. Successful attacks may result in unauthorized access to critical data or complete access to all data, as well as unauthorized modification of some data.

CVE-2026-70863
High

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A low-privileged attacker with Load Testing for Web Apps privilege and network access via HTTPS can compromise the system. Successful attacks may result in full takeover of Oracle Application Testing Suite.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS