Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.

Tracked: 409,413
Last 24h: 637
Critical, 7 days: 337
Known exploited: 1,779

All Critical High Medium Low Exploited only Public exploit

107,980 results · Clear filters · Feed

Medium 5.5

CVE-2026-91278

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics…

Oracle JD Edwards EnterpriseOne Tools

Oct 20, 2026
Medium 6.1

CVE-2026-91279

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supporte…

Oracle JD Edwards EnterpriseOne Tools

Oct 20, 2026
Medium 5.3

CVE-2026-91276

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator…

Oracle JD Edwards EnterpriseOne Orchestrator

Oct 20, 2026
Medium 6.6

CVE-2026-91275

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics…

Oracle JD Edwards EnterpriseOne Tools

Oct 20, 2026
Medium 5.3

CVE-2026-91277

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator…

Oracle JD Edwards EnterpriseOne Orchestrator

Oct 20, 2026
Medium 6.5

CVE-2026-91274

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics…

Oracle JD Edwards EnterpriseOne Tools

Oct 20, 2026
Medium 5.4

CVE-2026-91262

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supp…

Oracle Oracle WebCenter Content

Oct 20, 2026
Medium 4.9

CVE-2026-91263

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Notification Configurat…

Oracle PeopleSoft Enterprise PeopleTools

Oct 20, 2026
Medium 6.5

CVE-2026-91257

Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that…

Oracle iSupport

Oct 20, 2026
Medium 5.9

CVE-2026-91247

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

Oracle Oracle WebCenter Portal

Oct 20, 2026
Medium 5.3

CVE-2026-91248

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

Oracle Oracle WebCenter Portal

Oct 20, 2026
Medium 6.1

CVE-2026-91246

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

Oracle Oracle WebCenter Portal

Oct 20, 2026
Medium 4.7

CVE-2026-91244

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affe…

Oracle Oracle Solaris

Oct 20, 2026
Medium 6.5

CVE-2026-91245

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported …

Oracle Oracle WebCenter Portal

Oct 20, 2026
Medium 5.9

CVE-2026-91240

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

Oracle Oracle WebCenter Sites

Oct 20, 2026
Medium 6.5

CVE-2026-91210

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supp…

Oracle Oracle WebCenter Content

Oct 20, 2026
Medium 5.1

CVE-2026-91208

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affe…

Oracle Oracle Solaris

Oct 20, 2026
Medium 4.2

CVE-2026-91209

Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that …

Oracle Oracle Solaris

Oct 20, 2026
Medium 4.5

CVE-2026-87423

Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that …

Oracle Oracle Solaris

Oct 20, 2026
Medium 5.3

CVE-2026-87415

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). S…

Oracle PeopleSoft Enterprise PeopleTools

Oct 20, 2026
Medium 5.5

CVE-2026-87413

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is a…

Oracle Oracle Solaris

Oct 20, 2026
Medium 5.5

CVE-2026-87411

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is a…

Oracle Oracle Solaris

Oct 20, 2026
Medium 6.5

CVE-2026-87409

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported ver…

Oracle PeopleSoft Enterprise PeopleTools

Oct 20, 2026
Medium 6.8

CVE-2026-87410

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). S…

Oracle PeopleSoft Enterprise PeopleTools

Oct 20, 2026
Medium 6.5

CVE-2026-87407

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Security). Supported …

Oracle Oracle Applications Framework

Oct 20, 2026
Medium 6.3

CVE-2026-87399

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supp…

Oracle Oracle WebCenter Content

Oct 20, 2026
Medium 6.9

CVE-2026-87400

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supp…

Oracle Oracle WebCenter Content

Oct 20, 2026
Medium 6.5

CVE-2026-87396

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The…

Oracle Oracle Outside In Technology

Oct 20, 2026
Medium 6.5

CVE-2026-87392

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported ve…

Oracle WebCenter Content: Imaging

Oct 20, 2026
Medium 6.5

CVE-2026-87393

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The…

Oracle Oracle Outside In Technology

Oct 20, 2026
Medium 5.5

CVE-2026-87391

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versio…

Oracle WebCenter Content: Imaging

Oct 20, 2026
Medium 5.4

CVE-2026-87390

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

Oracle Oracle WebCenter Content

Oct 20, 2026
Medium 5.3

CVE-2026-87386

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). T…

Oracle JD Edwards EnterpriseOne General Ledger

Oct 20, 2026
Medium 5.3

CVE-2026-87388

Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Manag…

Oracle JD Edwards EnterpriseOne Configurator

Oct 20, 2026
Medium 6.5

CVE-2026-87387

Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (component: Homebuilder Manageme…

Oracle JD Edwards EnterpriseOne Homebuilder

Oct 20, 2026
Medium 5.4

CVE-2026-87384

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human…

Oracle JD Edwards EnterpriseOne Human Resources Management

Oct 20, 2026
Medium 4.8

CVE-2026-87385

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human…

Oracle JD Edwards EnterpriseOne Human Resources Management

Oct 20, 2026
Medium 6.7

CVE-2026-87383

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Suppor…

Oracle JD Edwards EnterpriseOne Tools

Oct 20, 2026
Medium 5.6

CVE-2026-113730

OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies

OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method that OGNL invokes but does not block java.lang.reflect.Method, java.lang.reflect.C…

orphan-oss ognl thingsboard-tb-node celeborn-0.6 Debian Ubuntu Wolfi Maven

Oct 20, 2026
Medium 5.4

CVE-2026-87381

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).…

Oracle JD Edwards EnterpriseOne Tools

Oct 20, 2026