CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-60659
High

Vulnerability in Oracle Solaris (component: Filesystems) version 11.4. A low-privileged attacker with local access can unauthorized create, delete, or modify critical data and cause a complete denial of service (DOS).

CVE-2026-60658
High

Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can, under difficult conditions and with user interaction, take over the server via HTTP.

CVE-2026-60657
High

Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, requires low privileges and user interaction, but may affect other products. Allows unauthorized access and modification of critical data.

CVE-2026-60656
High

Vulnerability in Oracle WebCenter Content (Web Content Management component) versions 12.2.1.4.0 and 14.1.2.0.0. Low-privileged attacker via HTTP can take over the system.

CVE-2026-60655
High

Vulnerability in Oracle WebCenter Content (Web Content Management component) versions 12.2.1.4.0 and 14.1.2.0.0. Low-privileged attacker via HTTP can take over the system.

CVE-2026-60654
High

Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can take over the system.

CVE-2026-60653
High

Vulnerability in Oracle WebCenter Content (Web Content Management component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

CVE-2026-60652
High

Vulnerability in Oracle WebCenter Content (component: Web Content Management) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP and victim interaction. Successful attack can lead to takeover of Oracle WebCenter Content.

CVE-2026-60651
High

Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can, with user interaction, take over the server via HTTP.

CVE-2026-60650
High

Vulnerability in Oracle WebCenter Content (component: Web Content Management) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP and victim interaction. Successful attack can lead to takeover of Oracle WebCenter Content.

CVE-2026-60648
High

Vulnerability in Oracle WebCenter Content (component: Web Content Management) allows a low-privileged attacker with network access via HTTP to compromise the system. User interaction is required.

CVE-2026-60647
High

Vulnerability in Oracle WebCenter Content (component: Web Content Management) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and cause partial denial of service.

CVE-2026-60646
High

Vulnerability in Oracle WebCenter Content (component: Web Content Management) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP and victim interaction. Successful attack can lead to takeover of Oracle WebCenter Content.

CVE-2026-60645
High

Vulnerability in Oracle WebCenter Content from Oracle Fusion Middleware (component: Web Content Management). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.

CVE-2026-60643
High

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP and victim interaction. Successful attack can lead to takeover of Oracle WebCenter Content.

CVE-2026-60642
High

Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data, modify it, and cause partial denial of service. User interaction is required.

CVE-2026-60641
High

Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to access critical data, modify it, and cause partial denial of service.

CVE-2026-60640
High

Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can, under difficult conditions and with user interaction, take over the server via HTTP, affecting other products.

CVE-2026-60639
High

Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to fully compromise the system.

CVE-2026-60638
High

Vulnerability in Oracle WebCenter Content (Oracle Fusion Middleware) allows an unauthenticated attacker with network access via HTTP, requiring user interaction, to take over the system. Affects versions 12.2.1.4.0 and 14.1.2.0.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS