CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

CISA KEV catalog updated: (v2026.08.20)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-70961
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology, Installation and Configuration component. Affects version 11.2.25.0.000. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of product data. May impact other products (scope change).

CVE-2026-70938
Medium

Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.

CVE-2026-70923
Medium

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.19. An unauthenticated attacker can compromise Helidon via HTTP, but user interaction is required. The attack may impact additional products (scope change) and lead to unauthorized modification and read access to some data.

CVE-2026-70917
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.

CVE-2026-70916
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.

CVE-2026-70912
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access, under difficult conditions and user interaction, can gain unauthorized creation, deletion, or modification of critical data, with impact on other products.

CVE-2026-70911
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker over the network (HTTP) can gain unauthorized read access to a subset of data.

CVE-2026-70907
Medium

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JSSE). An unauthenticated attacker over the network (TLS) can cause a partial denial of service (partial DoS).

CVE-2026-70895
Medium

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data, with impact on other products.

CVE-2026-70888
Medium

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP), under difficult conditions, can take over the system.

CVE-2026-70849
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP) can gain complete access to data and cause a complete denial of service (DoS).

CVE-2026-70847
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access can gain complete access to data, with impact on other products.

CVE-2026-70843
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to compromise confidentiality and integrity. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as unauthorized access to data.

CVE-2026-70841
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks may impact additional products (scope change) and lead to unauthorized access to data.

CVE-2026-70838
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise confidentiality and integrity. Attacks can result in unauthorized access to data and unauthorized modification of some data.

CVE-2026-70836
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70831
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70826
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70825
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70824
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

PreviousPage 22 of 930Next

Vulnerability data from NVD (NIST) · CISA KEV · EPSS