These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability was discovered in Oracle VM VirtualBox 7.2.8, affecting the VMSVGA device component. This easily exploitable vulnerability allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successfu [truncated]
A critical vulnerability was discovered in Oracle Enterprise Manager Base Platform, specifically in the Deployment Library component. The vulnerability is easily exploitable and allows a high privileged attacker with network access via HTTPS to compromise the platform. Successful attacks can result in takeover of Oracle Enterprise Manager Base Platform. This vulnerability affects versions 13.5 and 24.1 of [truncated]
A vulnerability was found in Oracle VM VirtualBox 7.2.8, a product of Oracle Virtualization (component: Core). This easily exploitable vulnerability allows high privileged attackers with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful atta [truncated]
A high-severity vulnerability was discovered in Oracle VM VirtualBox, specifically in the VMSVGA device component. This vulnerability, tracked as CVE-2026-46873, has a CVSS 3.1 Base Score of 7.5, indicating high impacts on confidentiality, integrity, and availability. The affected version is 7.2.8, and the vulnerability is difficult to exploit, requiring a high-privileged attacker with logon to the infras [truncated]
A critical vulnerability was discovered in Oracle Enterprise Manager Base Platform, affecting versions 13.5 and 24.1. The vulnerability allows high privileged attackers with network access via HTTPS to compromise the platform, potentially impacting additional products. Successful attacks can result in unauthorized creation, deletion, or modification of critical data, unauthorized read access to a subset o [truncated]
A vulnerability was found in MySQL Shell for VS Code, affecting version 2026.2.0+9.6.1. This medium-severity issue, scored 6.5, allows low-privileged attackers with network access to compromise MySQL Shell and access critical data. The vulnerability is easily exploitable and can result in unauthorized access to critical data or complete access to all MySQL Shell accessible data. The CVSS 3.1 Base Score is [truncated]
A high-severity vulnerability was discovered in MySQL Shell, a component of Oracle MySQL. The vulnerability, tracked as CVE-2026-46870, has a CVSS score of 8.5 and allows a low-privileged attacker with network access to compromise MySQL Shell. This difficult-to-exploit vulnerability can result in takeover of MySQL Shell and may significantly impact additional products. Administrators and users of MySQL Sh [truncated]
A vulnerability was discovered in MySQL Shell, a component of Oracle MySQL. The vulnerability allows an unauthenticated attacker with network access to compromise MySQL Shell, potentially leading to unauthorized access to critical data. This issue affects MySQL Shell versions 8.4.0-8.4.9 and 9.0.0-9.7.0. The vulnerability has a CVSS 3.1 Base Score of 6.5, indicating a medium severity level.
A high-severity vulnerability was found in Oracle Enterprise Manager Base Platform, specifically in the Extensibility Framework component. The vulnerability, CVE-2026-46868, has a CVSS score of 7.2 and can be easily exploited by a high-privileged attacker with network access via HTTPS, potentially leading to a takeover of the platform. This vulnerability affects versions 13.5 and 24.1 of the platform. Sec [truncated]
A high-severity vulnerability was discovered in Oracle Enterprise Manager Base Platform, affecting versions 13.5 and 24.1. This vulnerability, tracked as CVE-2026-46866, allows unauthenticated attackers with network access via HTTPS to compromise the platform. Successful attacks can result in a hang or frequently repeatable crash (complete DOS) of Oracle Enterprise Manager Base Platform and unauthorized u [truncated]
A high-severity vulnerability was discovered in Oracle Enterprise Manager Base Platform, affecting versions 13.5 and 24.1. The vulnerability, CVE-2026-46865, has a CVSS score of 8.2 and allows high-privileged attackers with logon access to compromise the platform. Successful attacks can result in takeover of Oracle Enterprise Manager Base Platform. This vulnerability is located in the Extensibility Framew [truncated]
A vulnerability was discovered in Oracle Enterprise Manager Base Platform, specifically in the Agent Next Gen component. The vulnerability is easily exploitable, allowing a low-privileged attacker with network access via SSH to compromise the platform, potentially leading to a full takeover. This issue affects versions 13.5 and 24.1 of the platform. System administrators and security teams should be aware [truncated]
A high-severity vulnerability was found in MySQL Server and MySQL Cluster products by Oracle MySQL. The vulnerability affects multiple versions and can be easily exploited by an unauthenticated attacker with network access via multiple protocols to compromise MySQL Server and MySQL Cluster. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) [truncated]
A high-severity vulnerability was discovered in MySQL Router, a component of Oracle MySQL. The vulnerability, tracked as CVE-2026-46862, allows unauthenticated attackers with network access via TLS to compromise MySQL Router, potentially leading to a denial of service (DOS). The vulnerability has a CVSS 3.1 Base Score of 7.5 and affects MySQL Router versions 8.4.0-8.4.9 and 9.0.0-9.7.0. System administrat [truncated]
A critical vulnerability was discovered in MySQL NDB Cluster, affecting versions 8.0.11-8.0.46, 8.4.0-8.4.9, and 9.0.0-9.7.0. This easily exploitable vulnerability allows low-privileged attackers with network access via HTTP to compromise MySQL NDB Cluster. Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all MySQL NDB Cluster accessible data, as [truncated]
A critical vulnerability was discovered in Oracle Agile PLM version 9.3.6. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle Agile PLM, potentially leading to a full takeover of the system. The vulnerability is located in the Security component of Oracle Agile PLM and has a CVSS 3.1 Base Score of 9.8, indicating a high impact on confid [truncated]
A critical vulnerability was discovered in Oracle APM - Application Performance Management, affecting versions 13.5 and 24.1. This vulnerability, tracked as CVE-2026-46858, allows unauthenticated attackers with network access via HTTP to compromise the application, potentially leading to unauthorized data modifications and service disruptions. The vulnerability has a CVSS 3.1 Base Score of 9.1, indicating [truncated]
A critical vulnerability was discovered in Oracle Enterprise Manager Base Platform, specifically in the Oracle Management Service component. The vulnerability is easily exploitable and allows unauthenticated attackers with network access via HTTP to compromise the platform, potentially leading to a full takeover. This issue affects versions 13.5 and 24.1 of the platform. Organizations should prioritize pa [truncated]
A critical vulnerability was discovered in Oracle Enterprise Manager Base Platform, specifically in the Metadata Plugin component. The vulnerability is easily exploitable and allows an unauthenticated attacker with network access via HTTP to compromise the platform. Successful attacks require human interaction and can result in takeover of the platform. This vulnerability has a significant impact as it ca [truncated]
A critical vulnerability was discovered in Oracle Enterprise Manager Base Platform, affecting versions 13.5 and 24.1. This vulnerability, tracked as CVE-2026-46855, has a CVSS score of 9.9, indicating a high severity level. It allows low-privileged attackers with network access via HTTPS to compromise the platform, potentially impacting additional products. The vulnerability is located in the Metadata Plu [truncated]
A critical vulnerability was discovered in Oracle Enterprise Manager Base Platform, specifically in the Target Management component. The vulnerability, tracked as CVE-2026-46854, has a CVSS score of 9.9 and allows a low-privileged attacker with network access via HTTP to compromise the platform, potentially impacting additional products. Successful attacks can result in takeover of Oracle Enterprise Manag [truncated]
A critical vulnerability was discovered in Oracle Enterprise Manager Base Platform, specifically in the Metadata Plugin component. The vulnerability is easily exploitable and allows an unauthenticated attacker with network access via HTTP to compromise the platform. This could lead to a takeover of the platform. The vulnerability has a CVSS 3.1 Base Score of 9.6, indicating a high impact on confidentialit [truncated]
A critical vulnerability, CVE-2026-46852, with a CVSS score of 9.9, was discovered in the Metadata Plugin component of Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. This vulnerability can be easily exploited by a low-privileged attacker with network access via HTTPS, potentially leading to a takeover of the platform. The vulnerability has a significant impact and can affect additional pr [truncated]
A vulnerability was discovered in PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft. The vulnerability is easily exploitable, allowing a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Financials. Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all PeopleSoft Enterprise C [truncated]
A high-severity vulnerability was found in WebLogic Server, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46848, affects versions 14.1.2.0.0 and 15.1.1.0.0. It allows a low-privileged attacker with logon to the infrastructure where WebLogic Server executes to compromise the server. Successful attacks require human interaction from a person other than the attacker and can re [truncated]
A critical vulnerability was discovered in Oracle WebCenter Portal's Security Framework. This vulnerability, tracked as CVE-2026-46846, allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Portal. The vulnerability has a CVSS 3.1 Base Score of 10.0, indicating high impacts on Confidentiality, Integrity, and Availability. Organizations should prioritize patching to p [truncated]
A critical vulnerability was discovered in Oracle WebCenter Portal's Security Framework, tracked as CVE-2026-46845, with a CVSS score of 9.8. The vulnerability allows unauthenticated attackers with network access via HTTPS to compromise the system, potentially leading to a complete takeover of Oracle WebCenter Portal. Successful attacks can result in high impacts on confidentiality, integrity, and availability.
A critical vulnerability was discovered in Oracle WebCenter Portal's Security Framework, tracked as CVE-2026-46844. The vulnerability has a CVSS score of 9.9, indicating a critical severity level. It allows low-privileged attackers with network access via HTTPS to compromise the system. The vulnerability affects Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is easily exploi [truncated]
A critical vulnerability was discovered in Oracle WebCenter Portal's Security Framework, tracked as CVE-2026-46838, with a CVSS score of 9.9. The vulnerability allows low-privileged attackers with network access via HTTPS to compromise the system, affecting Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability has a significant impact and can result in a takeover of Oracle WebCente [truncated]
A vulnerability was discovered in Oracle VM VirtualBox 7.2.8, specifically in the VMSVGA device component. This vulnerability can be easily exploited by a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes, potentially leading to unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data. The CVSS 3.1 Base [truncated]
