CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.30)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-101779
Low

Vulnerability in the MySQL Server and MySQL Cluster product (component: Server: Telemetry) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to cause a partial denial of service of MySQL Server and MySQL Cluster.

CVE-2026-101740
Low

Vulnerability in the Oracle Agile Engineering Data Management product (component: Engineering Communication Interface) affecting version 6.2.1. A difficult to exploit vulnerability requires logon to the infrastructure and allows a low privileged attacker to gain unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data.

CVE-2026-101738
Low

Vulnerability in the Oracle Agile Engineering Data Management product (component: Engineering Communication Interface) affecting version 6.2.1. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized update, insert or delete access to some data.

CVE-2026-101600
Low

Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB) affecting versions 26.1-26.1.1.3.0. A difficult to exploit vulnerability requires logon to the infrastructure and allows a low privileged attacker to gain unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data.

CVE-2026-101577
Low

Vulnerability in the Helidon product (component: helidon-cors) affecting versions 4.0.0-4.5.5. A difficult to exploit vulnerability requires human interaction and allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert or delete access to some data.

CVE-2026-101576
Low

Vulnerability in the Helidon product (component: LRA) affecting versions 4.0.0-4.5.5. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data.

CVE-2026-101570
Low

Vulnerability in Helidon (component helidon-webserver-http2) affecting versions 4.0.0-4.5.5. A difficult-to-exploit attack via HTTP/2 allows an unauthenticated network attacker to cause a partial denial of service.

CVE-2026-101513
Low

Vulnerability in MySQL Cluster (component InnoDB) affecting versions 8.0.0-8.0.37. A difficult-to-exploit attack requiring physical access can cause a hang or repeatable crash (complete DoS).

CVE-2026-101449
Low

Vulnerability in Siebel CRM Deployment (component Siebel Management Console) affecting versions 17.0-26.9. An easily exploitable attack requiring physical access allows unauthorized read access to a subset of data.

CVE-2026-101445
Low

Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user logged into the infrastructure allows unauthorized update, insert, delete, and read access to data.

CVE-2026-101442
Low

Vulnerability in Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult-to-exploit attack by a low-privileged user with network access via HTTP allows unauthorized read access to a subset of data.

CVE-2026-101425
Low

Vulnerability in PeopleSoft Enterprise PeopleTools (component SQR) affecting versions 8.61-8.63. A difficult-to-exploit attack by a low-privileged user logged into the infrastructure allows unauthorized read access to a subset of data.

CVE-2026-101417
Low

Vulnerability in PeopleSoft Enterprise PeopleTools (component Tuxedo) affecting versions 8.61-8.63. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP allows unauthorized read access to a subset of data.

CVE-2026-101415
Low

Vulnerability in PeopleSoft Enterprise PeopleTools (component Analytic Server) affecting versions 8.61-8.63. A difficult-to-exploit attack by a low-privileged user with network access via HTTP allows a partial denial of service.

CVE-2026-101414
Low

Vulnerability in PeopleSoft Enterprise PeopleTools (component Porting) affecting versions 8.61-8.63. A difficult-to-exploit attack by an unauthenticated attacker logged into the infrastructure allows unauthorized update, insert, or delete access to data.

CVE-2026-101406
Low

Vulnerability in Siebel Apps - Marketing (component Marketing) affecting versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP allows unauthorized read access to a subset of data.

CVE-2026-101404
Low

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows a high-privileged attacker with infrastructure logon to update, insert or delete data, read a subset of data, and cause a partial denial of service.

CVE-2026-101402
Low

Vulnerability in Siebel Apps - Marketing (Email Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to cause a partial denial of service.

CVE-2026-101401
Low

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with infrastructure logon to cause a partial denial of service.

CVE-2026-101400
Low

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with infrastructure logon to cause a partial denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS