CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-71147
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires user interaction and network access via HTTP. Allows an unauthenticated attacker to perform unauthorized data modification and cause partial denial of service.

CVE-2026-71145
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires user interaction and network access via HTTP. Allows a low-privileged attacker to perform unauthorized modification and read of some data, and may impact additional products (scope change).

CVE-2026-71139
Medium

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure. Allows a high-privileged attacker to cause a hang or frequent crashes (complete DoS) of VirtualBox.

CVE-2026-71137
Medium

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure. Allows a high-privileged attacker to cause a hang or frequent crashes (complete DoS) of VirtualBox, and may impact additional products (scope change).

CVE-2026-71135
Medium

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure. Allows a high-privileged attacker to cause a hang or frequent crashes (complete DoS) of VirtualBox, and may impact additional products (scope change).

CVE-2026-71134
Medium

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure. Allows a high-privileged attacker to perform unauthorized modification and read of some data and cause partial denial of service, and may impact additional products (scope change).

CVE-2026-71132
Medium

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Difficult to exploit, requires logon to the infrastructure. Allows a high-privileged attacker to gain unauthorized access to critical data or complete access to all VirtualBox data, and may impact additional products (scope change).

CVE-2026-71128
Medium

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure. Allows a high-privileged attacker to cause a hang or frequent crashes (complete DoS) of VirtualBox, and may impact additional products (scope change).

CVE-2026-71127
Medium

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure. Allows a high-privileged attacker to cause a hang or frequent crashes (complete DoS) of VirtualBox, and may impact additional products (scope change).

CVE-2026-71125
Medium

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure and user interaction. Allows an unauthenticated attacker to cause a hang or frequent crashes (complete DoS) of VirtualBox and unauthorized modification of some data.

CVE-2026-71124
Medium

Vulnerability in Oracle Access Manager (Authorization Engine) affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can cause a partial denial of service via network (TCP).

CVE-2026-71123
Medium

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized read and modify access to some data.

CVE-2026-71121
Medium

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP can modify data and cause partial denial of service.

CVE-2026-71120
Medium

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A low-privileged attacker, under difficult conditions, can cause a complete denial of service (hang or frequent crashes).

CVE-2026-71119
Medium

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A high-privileged attacker with local access can fully compromise the system.

CVE-2026-71118
Medium

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP, under difficult conditions, can gain unauthorized read and modify access to some data.

CVE-2026-71115
Medium

Vulnerability in Oracle VM VirtualBox (Core) in version 7.2.14. A high-privileged attacker with local access can access critical data, and the attack may impact other products (scope change).

CVE-2026-71114
Medium

Vulnerability in Oracle VM VirtualBox (Core) in version 7.2.14. A high-privileged attacker with local access can access critical data, and the attack may impact other products (scope change).

CVE-2026-71109
Medium

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A high-privileged attacker with local access can fully compromise the system.

CVE-2026-71108
Medium

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A low-privileged attacker, under difficult conditions, can access critical data or all system data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS