These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A medium-severity vulnerability was found in MySQL Server and MySQL Cluster products by Oracle. The vulnerability is difficult to exploit and allows high privileged attackers with network access to cause a hang or frequently repeatable crash of MySQL Server and MySQL Cluster. This vulnerability is located in the Server: Replication component and has a CVSS 3.1 Base Score of 4.4. Successful attacks can res [truncated]
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Replication component. The affected versions are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. This difficult-to-exploit vulnerability allows a high-privileged attacker with network access via multiple protocols to compromise MySQ [truncated]
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Group Replication Plugin component. The affected versions are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. This difficult-to-exploit vulnerability allows high-privileged attackers with network access via multiple protocols to com [truncated]
A vulnerability exists in MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Replication component. The vulnerability is difficult to exploit and allows high privileged attackers with network access via multiple protocols to compromise MySQL Server and MySQL Cluster. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of My [truncated]
A vulnerability exists in MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Clone Plugin component. The affected versions are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. This difficult-to-exploit vulnerability allows a high-privileged attacker with logon to the infrastructure where MySQL Server and MySQL Cluster ex [truncated]
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Clone Plugin component. The affected versions are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. This difficult-to-exploit vulnerability allows a high-privileged attacker with network access via multiple protocols to compromise MySQ [truncated]
A vulnerability exists in MySQL Server and MySQL Cluster products of Oracle MySQL. The vulnerability is difficult to exploit and allows a low-privileged attacker with logon to the infrastructure where MySQL Server and MySQL Cluster execute to compromise these products. Successful attacks require human interaction from a person other than the attacker and can result in takeover of MySQL Server and MySQL Cl [truncated]
The CVE-2026-60180 vulnerability affects MySQL Connectors product of Oracle MySQL, specifically the Connector/C++ component. Supported versions that are affected are 9.7.0-9.7.1. This easily exploitable vulnerability allows unauthenticated attackers with network access via multiple protocols to compromise MySQL Connectors, potentially leading to a complete Denial of Service (DOS). The vulnerability has a [truncated]
A high-severity vulnerability was found in MySQL Connectors, specifically in the Connector/C++ component. The vulnerability has a CVSS score of 7.4 and can allow an unauthenticated attacker with network access to compromise MySQL Connectors, potentially leading to unauthorized creation, deletion, or modification of critical data. This issue is difficult to exploit and requires multiple protocols for netwo [truncated]
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Clone Plugin component. The affected versions are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. This difficult-to-exploit vulnerability allows high-privileged attackers with network access via multiple protocols to compromise MySQL [truncated]
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Clone Plugin component. The affected versions are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. This difficult-to-exploit vulnerability allows high-privileged attackers with network access via multiple protocols to compromise MySQ [truncated]
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Optimizer component. The affected versions are MySQL Server: 9.7.0-9.7.1 and MySQL Cluster: 9.7.0-9.7.1. This vulnerability allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server and MySQL Cluster. Successful attacks can result in unauth [truncated]
The CVE-2026-60173 vulnerability affects Oracle BI Publisher versions 8.2.0.0.0 and 12.2.1.4.0, allowing unauthenticated attackers with network access via HTTP to compromise the system, potentially leading to a takeover. This vulnerability is easily exploitable and has a CVSS 3.1 Base Score of 9.8, indicating a Critical severity level. Organizations should prioritize patching or mitigating this vulnerabil [truncated]
A vulnerability exists in MySQL Cluster, an Oracle MySQL component, specifically in the Server: Optimizer. The affected versions are 8.0.0 through 8.0.47. This issue allows a high-privileged attacker with network access to cause a denial of service (complete DOS) of MySQL Cluster. The vulnerability has a CVSS 3.1 Base Score of 4.9, indicating a medium severity. The CVSS Vector is CVSS:3.1/AV:N/AC:L/PR:H/U [truncated]
The CVE-2026-60169 vulnerability in Oracle Hospitality Simphony is a high-severity security risk. This vulnerability, classified as difficult to exploit, allows unauthenticated attackers with network access via HTTP to potentially take over the system. The affected versions include 19.8-19.8.5, 19.9-19.9.3, and 19.10. The CVSS score of 8.1 indicates a high level of severity, impacting confidentiality, int [truncated]
The CVE-2026-60168 vulnerability affects Oracle Hospitality Simphony, a product within Oracle Food and Beverage Applications. This vulnerability is classified under the POS component and has a CVSS 3.1 Base Score of 9.1, indicating a Critical severity level. The vulnerability allows unauthenticated attackers with network access via HTTP to compromise the system, potentially leading to unauthorized creatio [truncated]
The CVE-2026-60166 vulnerability affects Oracle Java SE 8u491, a difficult-to-exploit issue allowing unauthenticated attackers with network access to potentially read a subset of accessible data. Human interaction is required for exploitation. The vulnerability has a CVSS score of 3.1 and a CVSS vector of (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N). This vulnerability applies to Java deployments, typic [truncated]
The CVE-2026-60164 vulnerability affects Oracle Java SE, specifically the JavaFX component, in version 8u491. This difficult-to-exploit vulnerability allows unauthenticated attackers with network access via multiple protocols to compromise the system, requiring human interaction. Successful attacks can result in unauthorized read access to a subset of accessible data. The vulnerability primarily affects c [truncated]
A high-severity vulnerability was discovered in Oracle VM VirtualBox, affecting version 7.2.12. This vulnerability, CVE-2026-60159, has a CVSS score of 7.5 and can be exploited by a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. Successful exploitation can lead to a takeover of Oracle VM VirtualBox. The vulnerability is difficult to exploit and requir [truncated]
A vulnerability was discovered in Oracle VM VirtualBox, specifically in the Core component. The affected version is 7.2.12. This difficult-to-exploit vulnerability requires a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or all Oracle VM VirtualBox ac [truncated]
A vulnerability exists in Oracle GoldenGate (component: Service Manager). The affected versions are 19.1.0.0.0-19.29.0.0, 21.3-21.21, and 23.4-23.26.1.0.0. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle GoldenGate, potentially leading to a takeover of the system. The CVSS 3.1 Base Score is 8.8, indicating a high severity level. Organizations should be [truncated]
The CVE-2026-60156 vulnerability is a medium severity issue in Oracle APEX, affecting versions 24.1, 24.2, and 26.1. It allows unauthenticated attackers with network access via HTTP to compromise Oracle APEX, potentially leading to unauthorized read access to a subset of Oracle APEX accessible data. Organizations should review and apply security patches, implement compensating controls, and verify invento [truncated]
A high-severity vulnerability was discovered in Oracle VM VirtualBox, affecting version 7.2.12. This vulnerability, tracked as CVE-2026-60155, has a CVSS score of 7.5 and can be exploited by a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. Successful exploitation can lead to a takeover of Oracle VM VirtualBox. The vulnerability is difficult to exploit [truncated]
A vulnerability was found in PeopleSoft Enterprise PeopleTools of Oracle PeopleSoft. The affected versions are 8.61 and 8.62. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized update, insert or delete access to s [truncated]
A high-severity vulnerability was discovered in Oracle VM VirtualBox, specifically in the Core component. The vulnerability, tracked as CVE-2026-60150, has a CVSS score of 7.8 and can be easily exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. Successful exploitation can lead to a takeover of Oracle VM VirtualBox. The vulnerability allows a [truncated]
The CVE-2026-60147 vulnerability is a security issue in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. It allows an unauthenticated attacker with network access to compromise these products, potentially leading to unauthorized data access and modifications. The vulnerability has a CVSS 3.1 Base Score of 6.5 and is classified as MEDIUM severity. Organizations should review t [truncated]
A vulnerability was found in MySQL Server and MySQL Cluster products of Oracle MySQL. The affected versions are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. This vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server and MySQL Cluster, potentially causing a hang or frequently repeatable cr [truncated]
A vulnerability was discovered in the MySQL Server and MySQL Cluster products of Oracle MySQL, specifically in the Server: Optimizer component. The affected versions are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. This vulnerability allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server and MySQL Clust [truncated]
The CVE-2026-47063 vulnerability affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products. It is caused by a weakness in the Libraries component and has a CVSS score of 7.5, indicating high severity. The vulnerability can be easily exploited by unauthenticated attackers with network access via multiple protocols, potentially leading to unauthorized creation, deletion, [truncated]
A vulnerability was discovered in Oracle VM VirtualBox, specifically in the Core component. The affected version is 7.2.12. This vulnerability is easily exploitable by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes, allowing them to compromise the system. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable cr [truncated]
