Vulnarycritical

the critical ledger · updated hourly

Critical vulnerability intelligence.

New critical security flaws land every day. Vulnary tells you what each one actually is, who it hits, how serious it really is, and the exact steps to shut it down.

Browse the feed ↓Am I affected? →

scroll

1,694critical tracked/55new today/31known-exploited/0exploit available/1,694critical tracked/55new today/31known-exploited/0exploit available/1,694critical tracked/55new today/31known-exploited/0exploit available/1,694critical tracked/55new today/31known-exploited/0exploit available/

The feed (latest)

1,694 entries

Your stack

Add the software you run to see what affects you.

view

source

fromto

CVE-2026-60524

Oracle Webcenter Enterprise Capture +1 more

A critical flaw in Oracle WebCenter Enterprise Capture lets attackers take full control of the system. The bug can be triggered over the network with minimal privileges and no user interaction. It affects versions 12.2.1.4.0 and 14.1.2.0.0.

Critical· 9.9<1% likely

published 11d agodeletes in 35d

CVE-2026-60463

Oracle Webcenter Content +1 more

A critical flaw in Oracle WebCenter Content: Imaging lets anyone on the network take full control of the application. The bug can be triggered without authentication or user interaction. It affects versions 12.2.1.4.0 and 14.1.2.0.0.

Critical· 9.8<1% likely

published 11d agodeletes in 35d

CVE-2026-60461

Oracle Webcenter Enterprise Capture +1 more

Oracle WebCenter Enterprise Capture has a critical flaw that lets attackers with low privileges and network access via T3 or IIOP take over the system. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 and can also impact other Oracle Fusion Middleware components.

Critical· 9.9<1% likely

published 11d agodeletes in 35d

CVE-2026-60460

Oracle Webcenter Enterprise Capture +1 more

Oracle WebCenter Enterprise Capture is vulnerable to a critical flaw that lets an unauthenticated attacker with network access via T3 or IIOP take full control of the system. The affected versions are 12.2.1.4.0 and 14.1.2.0.0.

Critical· 9.8<1% likely

published 11d agodeletes in 35d

CVE-2026-60459

Oracle Webcenter Enterprise Capture +1 more

A critical vulnerability exists in the Oracle WebCenter Enterprise Capture product within Oracle Fusion Middleware. This flaw allows an attacker with low-level privileges to gain control over the system via a network connection.

Critical· 9.9<1% likely

published 11d agodeletes in 35d

CVE-2026-60458

Oracle Webcenter Enterprise Capture +1 more

A critical flaw in Oracle WebCenter Enterprise Capture allows attackers to take full control of the system. The vulnerability can be exploited over the network using T3 or IIOP protocols, even by users with low privileges. It affects versions 12.2.1.4.0 and 14.1.2.0.0 of the product.

Critical· 9.9<1% likely

published 11d agodeletes in 35d

CVE-2026-60457

Oracle Webcenter Enterprise Capture +1 more

A critical vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle) allows a low‑privileged attacker with network access via T3 or IIOP to take full control of the affected system. Versions 12.2.1.4.0 and 14.1.2.0.0 are impacted, and the flaw can affect other products due to a scope change. No official fix or known exploitation is documented in the provided sources.

Critical· 9.9<1% likely

published 11d agodeletes in 35d

CVE-2026-60456

Oracle Webcenter Enterprise Capture +1 more

A critical flaw in Oracle WebCenter Enterprise Capture lets attackers with network access take control of the application. The vulnerability can be exploited over HTTP by a low‑privileged user and can affect other Oracle products because the scope changes. It is rated CVSS 9.9.

Critical· 9.9<1% likely

published 11d agodeletes in 35d

CVE-2026-60447

Oracle Webcenter Enterprise Capture +1 more

A critical flaw in Oracle WebCenter Enterprise Capture allows attackers with network access to take over the system. The vulnerability can be exploited by a low‑privileged user over HTTP, giving full control over the application. It affects versions 12.2.1.4.0 and 14.1.2.0.0.

Critical· 9.9<1% likely

published 11d agodeletes in 35d

CVE-2026-60446

Oracle Webcenter Enterprise Capture +1 more

Oracle WebCenter Enterprise Capture has a critical flaw that lets attackers with network access via T3 or IIOP take over the system without authentication. The issue affects versions 12.2.1.4.0 and 14.1.2.0.0 and can compromise confidentiality, integrity, and availability.

Critical· 9.8<1% likely

published 11d agodeletes in 35d

CVE-2026-60445

Oracle Webcenter Enterprise Capture +1 more

CVE-2026-60445 is a critical vulnerability in Oracle WebCenter Enterprise Capture (versions 12.2.1.4.0 and 14.1.2.0.0) that allows low-privileged attackers with network access via T3 or IIOP protocols to take over the system. The flaw enables remote compromise with high impact on confidentiality, integrity, and availability.

Critical· 9.9<1% likely

published 11d agodeletes in 35d

CVE-2026-60442

Oracle Fusion Middleware’s Service Delivery Platform has a critical flaw that lets anyone on the network take full control of the platform. The vulnerability is in the Messaging Enabler component and affects versions 12.2.1.4.0 and 14.1.2.0.0. It can be exploited without authentication or user interaction.

Critical· 9.8<1% likely

published 11d agodeletes in 35d

CVE-2026-60441

A critical flaw in Oracle Fusion Middleware’s Service Delivery Platform lets attackers take full control of the platform without authentication. The issue can be triggered over network protocols T3 or IIOP and affects versions 12.2.1.4.0 and 14.1.2.0.0. Successful exploitation would compromise confidentiality, integrity, and availability of the platform.

Critical· 9.8<1% likely

published 11d agodeletes in 35d

CVE-2026-60438

Oracle Http Server +1 more

CVE-2026-60438 is a critical vulnerability (CVSS 9.1) in Oracle HTTP Server's mod_ssl component affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized read, write, or delete access to critical data stored by the server. No public exploit or CISA KEV entry is currently documented.

Critical· 9.1<1% likely

published 11d agodeletes in 35d

CVE-2026-60435

Oracle Webcenter Content +1 more

Oracle WebCenter Content is vulnerable to a critical flaw that lets anyone on the network take full control of the system. The flaw can be triggered over HTTP without authentication, allowing attackers to steal, modify, or delete data and disrupt services. It affects versions 12.2.1.4.0 and 14.1.2.0.0.

Critical· 9.8<1% likely

published 11d agodeletes in 35d

CVE-2026-60429

Oracle Unified Directory +1 more

A critical flaw in Oracle Unified Directory lets attackers with LDAP network access take over the directory service. The vulnerability can be exploited by low‑privileged users and can affect other Oracle products. It is rated CVSS 9.9.

Critical· 9.9<1% likely

published 11d agodeletes in 35d

CVE-2026-60424

Oracle Unified Directory +1 more

A critical flaw in Oracle Unified Directory (OUD Core) lets an unauthenticated attacker with LDAP network access take control of the directory service. The vulnerability can also affect other Oracle Fusion Middleware components because the scope changes. It is hard to exploit but could lead to full compromise of the directory.

Critical· 9<1% likely

published 11d agodeletes in 35d

CVE-2026-60422

Oracle Unified Directory

Oracle Unified Directory (OUD) version 14.1.2.1.0 has a critical vulnerability that lets a low‑privileged attacker with network access create, delete, or modify data, or cause a partial denial of service. The flaw can be exploited over LDAP and can affect other Oracle products as well.

Critical· 9.9<1% likely

published 11d agodeletes in 35d