Browse CVEs

HIGH 8.8 CVE-2026-7187 Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by… Mitigation only Fix from $1,9502026-07-28 HIGH 8.7 CVE-2026-12989 A lack of authentication in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the devic… No fix yet Fix from $1,9502026-07-27 MEDIUM 5.3 CVE-2026-66006 lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setup_comm_prefs endpoint that allows unauthe… Lakefs after 1.83.0 Fix from $1,6002026-07-24 CRITICAL 10.0 CVE-2026-56163 Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a netwo… Azure Kubernetes Service No fix yet Fix from $2,3002026-07-24 HIGH 8.2 CVE-2026-63765 Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unauthenticated attackers to crea… No fix yet Fix from $1,9502026-07-23 MEDIUM 5.3 CVE-2026-47769 APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f… No fix yet Fix from $1,6002026-07-23 CRITICAL 10.0 CVE-2026-64812 In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session Intellij Idea 2026.2+ Fix from $2,3002026-07-23 CRITICAL 9.8 CVE-2026-60372 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versi… Platform Security For Java No fix yet Fix from $2,3002026-07-22 HIGH 8.8 CVE-2026-60373 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versi… Platform Security For Java No fix yet Fix from $1,9502026-07-22 HIGH 8.8 CVE-2026-60439 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versi… Platform Security For Java Mitigation only Fix from $1,9502026-07-22 HIGH 8.8 CVE-2026-61246 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versi… Platform Security For Java No fix yet Fix from $1,9502026-07-22 CRITICAL 10.0 CVE-2026-60366 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versi… Platform Security For Java No fix yet Fix from $2,3002026-07-22 CRITICAL 9.8 CVE-2026-60367 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versi… Platform Security For Java No fix yet Fix from $2,3002026-07-22 MEDIUM 5.3 CVE-2026-65012 InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_folder endpoint that accepts at… No fix yet Fix from $1,6002026-07-22 MEDIUM 5.3 CVE-2026-65014 n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoint before authentication midd… N8n 2.27.4+ Fix from $1,6002026-07-22 HIGH 7.5 CVE-2026-65319 Feedbin (commit 739884a) contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private a… No fix yet Fix from $1,9502026-07-21 HIGH 8.1 CVE-2026-62547 Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affec… Workflow after 12.2.15 Fix from $1,9502026-07-21 HIGH 8.8 CVE-2026-62534 Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affect… Applications Framework after 12.2.15 Fix from $1,9502026-07-21 HIGH 7.5 CVE-2026-62493 Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are… E Business Suite after 12.2.15 Fix from $1,9502026-07-21 HIGH 8.8 CVE-2026-62496 Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affecte… Yard Management after 12.2.15 Fix from $1,9502026-07-21 HIGH 8.8 CVE-2026-62498 Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affe… Flow Manufacturing after 12.2.15 Fix from $1,9502026-07-21 HIGH 8.8 CVE-2026-62478 Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that ar… Public Sector Financials after 12.2.15 Fix from $1,9502026-07-21 MEDIUM 6.3 CVE-2026-62474 Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Lease Authoring). Supported versions that ar… Lease And Finance Management after 12.2.15 Fix from $1,6002026-07-21 HIGH 8.8 CVE-2026-62476 Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are a… Public Sector Payroll after 12.2.15 Fix from $1,9502026-07-21 HIGH 8.8 CVE-2026-62447 Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.… Trade Management No fix yet Fix from $1,9502026-07-21 HIGH 8.8 CVE-2026-62464 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12… Payroll after 12.2.15 Fix from $1,9502026-07-21 HIGH 8.8 CVE-2026-61320 Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 1… E Business Suite after 12.2.15 Fix from $1,9502026-07-21 HIGH 8.8 CVE-2026-61322 Vulnerability in the TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-… Telesales after 12.2.15 Fix from $1,9502026-07-21 HIGH 8.8 CVE-2026-61311 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected ar… Product Hub No fix yet Fix from $1,9502026-07-21 HIGH 7.2 CVE-2026-61285 Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions th… Process Manufacturing Systems after 12.2.15 Fix from $1,9502026-07-21