Oracle APEX

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 21, 2026
Last mentioned4d ago

Timeline

2 articles · newest first

Oracle October 2026 CPU fixes unauthenticated E-Business Suite takeover bug

CVE-2026-101809 scores CVSS 10.0 in Workflow Notification Mailer 12.2.3–12.2.15; three other issues rate 9.8, with no confirmed exploitation.

Cyber Security Newsupdated Oct 23, 17:59 UTC · 2d agofirst Oct 21, 11:26 UTC · 4d agoVulnerability 5 sourcesCVE-2026-101809 CVE-2026-101767 CVE-2026-75803+16 · 2 reads

Oracle October 2026 CPU issues 1,295 patches, including CVSS 9.8 flaws

Six hundred ninety patches are remotely exploitable without authentication, spanning database, middleware, Java and applications.

GBHackersOct 21, 09:18 UTC · 4d agoVulnerabilityCVE-2026-75803 CVE-2026-101521 CVE-2026-66010+53 · 2 reads

Related CVEs

by mentions

CVE-2026-1015219.8
Missing authentication allows unauthenticated takeover of Oracle APEX
published 4d agoOracle APEX
CVE-2026-75803<1%9.1
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the…
published Aug 25, 2026openssl openssl
CVE-2026-10180910.0
Unauthenticated Workflow takeover in Oracle E-Business Suite
published 4d agoOracle E-Business Suite Workflow (Workflow Notification Mailer)
CVE-2026-916389.9
Improper access control in Oracle Essbase 21.8.3.0.0
published 4d agoOracle Essbase
CVE-2026-916639.9
Improper access control in Oracle Essbase 21.8.3.0.0
published 4d agoOracle Essbase
CVE-2026-916589.9
Improper access control enables takeover of Oracle Essbase
published 4d agoOracle Essbase
CVE-2026-916379.9
Low-privilege access-control flaw in Oracle Essbase 21.8.3.0.0
published 4d agoOracle Essbase
CVE-2026-1017679.8
Missing authentication in Oracle E-Business Suite Application Object Library
published 4d agoOracle Application Object Library (Oracle E-Business Suite)
CVE-2026-916659.8
Unauthenticated takeover of Oracle Essbase 21.8.3.0.0
published 4d agoOracle Essbase
CVE-2026-66010<1%5.1
DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck, allowing attributes…
published Jul 24, 2026cure53 dompurifyPoC

Appears with

Oracle Database Serverproduct · 2
Oraclevendor · 2
Oracle E-Business Suiteproduct · 2
Oracle Java SEproduct · 1
Oracle Application Object Libraryproduct · 1
Oracle Essbaseproduct · 1
Oracle Fusion Middlewareproduct · 1
Oracle Autonomous Health Frameworkproduct · 1
Oracle MySQLproduct · 1
Tenableorganization · 1

Entities are extracted by the model from each article. First seen Oct 21, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.