vulnerability CISA Warns of Exploited Oracle WebLogic Vulnerability The CISA has issued a critical warning to federal agencies about a widely exploited vulnerability in Oracle WebLogic servers (CVE-2026-21962). This flaw allows attackers to execute code remotely without authentication, and has been actively exploited since January, with a China-linked threat actor targeting government… SecurityWeek · 5d ago Critical CVE-2026-21962CNoracleweblogicvulnerability
threat-intel 943 Patches Rolled Out With Oracle’s August 2026 Security Update Oracle released a massive update – 943 security patches – as part of its August 2026 Critical Security Patch Update, addressing over 1,000 unique vulnerabilities across numerous products. Many of these flaws, particularl… SecurityWeek · Aug 19, 2026 High patchingvulnerabilitiessecurity
vulnerability Multiples vulnérabilités dans Oracle Systems (19 août 2026) Multiple vulnerabilities have been discovered within Oracle Systems, potentially allowing attackers to compromise data confidentiality and integrity. These vulnerabilities affect several Oracle products and require immed… CERT-FR · Aug 19, 2026 High CVE-2026-60822CVE-2026-70737CVE-2026-70829oraclevulnerabilitypatch
vulnerability Multiples vulnérabilités dans Oracle PeopleSoft (19 août 2026) A French security advisory from CERT-FR details multiple vulnerabilities within Oracle PeopleSoft versions 9.2 and 8.61-8.63. These flaws could lead to data breaches, data integrity issues, denial of service attacks, and… CERT-FR · Aug 19, 2026 High CVE-2026-60742CVE-2026-60821CVE-2026-60831oraclepeoplesoftvulnerability
vulnerability Multiples vulnérabilités dans Oracle Virtualization (19 août 2026) Multiple vulnerabilities have been discovered in Oracle Virtualization, primarily affecting Oracle VM VirtualBox version 7.2.14. These vulnerabilities allow for denial of service, data confidentiality breaches, and data… CERT-FR · Aug 19, 2026 High CVE-2026-71113CVE-2026-71114CVE-2026-71115vulnerabilityvirtualizationoracle
vulnerability Multiples vulnérabilités dans Oracle Database Server (19 août 2026) Multiple vulnerabilities have been discovered in Oracle Database Server, allowing attackers to potentially execute code remotely, cause denial of service, and compromise data confidentiality. These vulnerabilities affect… CERT-FR · Aug 19, 2026 High CVE-2026-59889CVE-2026-71062CVE-2026-71063oracledatabasevulnerability
vulnerability Multiples vulnérabilités dans Oracle Weblogic (19 août 2026) Multiple vulnerabilities have been discovered in Oracle WebLogic Server, allowing attackers to cause denial of service, compromise data confidentiality, and potentially execute arbitrary code remotely. These vulnerabilit… CERT-FR · Aug 19, 2026 High CVE-2023-21839CVE-2024-20931CVE-2026-60415oracleweblogicvulnerability
vulnerability Multiples vulnérabilités dans Oracle MySQL (19 août 2026) Multiple vulnerabilities have been discovered in Oracle MySQL, including remote code execution, denial of service, and data confidentiality issues. These vulnerabilities affect various MySQL versions and related products… CERT-FR · Aug 19, 2026 High CVE-2025-13151CVE-2025-14821CVE-2025-68161mysqloraclevulnerability
vulnerability Multiples vulnérabilités dans Oracle Java SE (19 août 2026) Multiple vulnerabilities have been discovered in Oracle Java SE, including those allowing for remote code execution, denial of service, and data confidentiality breaches. These vulnerabilities affect various Java SE vers… CERT-FR · Aug 19, 2026 High CVE-2026-60589CVE-2026-61308CVE-2026-62574javavulnerabilityoracle
threat-intel Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access Attackers exploited a SQL injection vulnerability in a public-facing web application to gain access to an Oracle database. They then leveraged a post-exploitation toolkit, ‘khunt,’ to execute commands on the underlying W… The Hacker News · Aug 6, 2026 High sql injectionkhuntpost-exploitation
vulnerability Multiples vulnérabilités dans Oracle PeopleSoft (23 juillet 2026) Multiple vulnerabilities have been discovered in Oracle PeopleSoft, allowing an attacker to cause a denial-of-service, lead to data confidentiality breaches, and compromise data integrity. These vulnerabilities are part… CERT-FR · Jul 23, 2026 High CVE-2025-55130CVE-2025-55131CVE-2025-55132oraclepeoplesoftvulnerability
vulnerability Multiples vulnérabilités dans Oracle Systems (23 juillet 2026) Multiple vulnerabilities have been discovered within Oracle Systems, potentially allowing attackers to compromise data confidentiality, integrity, and cause denial of service. These vulnerabilities affect various Oracle… CERT-FR · Jul 23, 2026 High CVE-2026-60659CVE-2026-60661CVE-2026-60833oraclevulnerabilitypatch
vulnerability Multiples vulnérabilités dans Oracle Database Server (23 juillet 2026) Multiple vulnerabilities have been discovered in Oracle Database Server, potentially leading to data integrity compromise, data confidentiality breaches, and remote denial-of-service attacks. These vulnerabilities affect… CERT-FR · Jul 23, 2026 High CVE-2025-7962CVE-2026-28387CVE-2026-28388oracledatabasevulnerability
vulnerability Multiples vulnérabilités dans Oracle Virtualization (23 juillet 2026) Multiple vulnerabilities have been discovered in Oracle Virtualization, allowing an attacker to compromise data confidentiality, data integrity, and cause a denial of service. These vulnerabilities affect Oracle VM Virtu… CERT-FR · Jul 23, 2026 Medium CVE-2026-47041CVE-2026-47043CVE-2026-47044oraclevirtualizationvulnerabilities
vulnerability Multiples vulnérabilités dans Oracle MySQL (23 juillet 2026) Multiple vulnerabilities have been discovered in Oracle MySQL, allowing an attacker to cause a denial-of-service, compromise data confidentiality, and damage data integrity. These vulnerabilities are present across vario… CERT-FR · Jul 23, 2026 High CVE-2025-68161CVE-2026-46936CVE-2026-47008mysqloraclevulnerability
vulnerability Multiples vulnérabilités dans Oracle Weblogic (23 juillet 2026) Multiple vulnerabilities have been discovered in Oracle WebLogic, allowing an attacker to compromise data confidentiality and integrity. These vulnerabilities affect various WebLogic Server Proxy Plug-ins and the WebLogi… CERT-FR · Jul 23, 2026 High CVE-2025-68161CVE-2026-34477CVE-2026-34478oracleweblogicvulnerability
vulnerability Multiples vulnérabilités dans Oracle Java SE (23 juillet 2026) Multiple vulnerabilities have been discovered in Oracle Java SE, potentially allowing an attacker to cause a denial of service, compromise data confidentiality, and damage data integrity. These vulnerabilities affect var… CERT-FR · Jul 23, 2026 High CVE-2026-41254CVE-2026-46917CVE-2026-46968javavulnerabilitysecurity
threat-intel Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates Oracle released a massive quarterly security update addressing over 1,400 vulnerabilities, primarily identified through the use of AI. The update includes fixes for a wide range of products and services, highlighting the… SecurityWeek · Jul 22, 2026 High patchvulnerabilityai
data-breach County Government Reportedly Paid $1 Million to Cyber Extortion Group A small county government in Ohio reportedly paid $1 million to the Kairos cyber extortion group to prevent the release of stolen data following a brute-force attack in May 2025. The attackers, Kairos, demanded $3 millio… SecurityWeek · Jul 7, 2026 High USdata breachransomwaregovernment
vulnerability CISA flags two-year-old Oracle flaw as actively exploited in attacks CISA has identified a two-year-old Oracle WebLogic Server vulnerability (CVE-2024-21182) as actively being exploited in attacks, prompting a directive for federal agencies to immediately patch their systems. The vulnerab… BleepingComputer · Jun 2, 2026 High CVE-2024-21182CVE-2025-61884CVE-2026-21992oracleweblogicvulnerability
