CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-71105
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires local access and low privileges. Successful attack can cause a hang or frequent crashes (complete DoS).

CVE-2026-71103
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker over network (HTTP). Successful attack can allow unauthorized modification, read access, and partial denial of service.

CVE-2026-71100
Medium

Vulnerability in the RDBMS component of Oracle Database Server, affecting versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. Easily exploitable by unauthenticated attacker over network (Oracle Net). Successful attack can allow unauthorized read access to a subset of data.

CVE-2026-71091
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (SQL). Successful attack can allow unauthorized creation, deletion, modification of data and full access to data.

CVE-2026-71090
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit by low-privileged attacker over network (HTTP). Successful attack can cause complete DoS, as well as unauthorized modification and read access to data.

CVE-2026-71088
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Difficult to exploit, requires low privileges, network access (HTTP) and user interaction. Successful attack can allow full access to data.

CVE-2026-71087
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Easily exploitable by unauthenticated attacker over network (HTTP). Successful attack can allow unauthorized read access to a subset of data.

CVE-2026-71085
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (HTTP). Successful attack can allow full access to data.

CVE-2026-71084
Medium

Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by unauthenticated attacker with local access. Successful attack can cause complete DoS and unauthorized read access to data.

CVE-2026-71079
Medium

Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by low-privileged attacker over network (multiple protocols). Successful attack can cause complete DoS.

CVE-2026-71078
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw requires login and user interaction; a low-privileged attacker can gain unauthorized access to data and cause partial denial of service.

CVE-2026-71077
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to system data.

CVE-2026-71076
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows an unauthenticated attacker over HTTP to gain unauthorized read access to a subset of system data.

CVE-2026-71075
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to data and modify it.

CVE-2026-71073
Medium

Vulnerability in MySQL Connectors (Connector/ODBC component) version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a complete denial of service (hang or frequent crashes).

CVE-2026-71071
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows a low-privileged attacker with physical access to the communication segment to gain unauthorized modification and read access to a subset of data.

CVE-2026-71070
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. A low-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.

CVE-2026-71066
Medium

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. An unauthenticated attacker with local access and user interaction can modify, insert, or delete some data and cause partial denial of service.

CVE-2026-71060
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.

CVE-2026-71033
Medium

Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. A low-privileged attacker with local access can gain unauthorized access to critical data or all accessible data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS