Security Advisories
150 advisoriesCVE-2026-59555
2026-08-13
Critical Vulnerability Allows Unauthenticated File Deletion in WordPress Plugin
A critical unauthenticated arbitrary file deletion vulnerability affects Participants Database plugin for WordPress versions 2.7.8.3 and below. Immediate patching is required to prevent remote attackers from exploiting this flaw for system compromise.
Read full advisory →CVE-2026-64812
2026-08-13
Critical Vulnerability in JetBrains IntelliJ IDEA Allows Unauthorized Input Injection (CVE-2026-64812)
A critical vulnerability in JetBrains IntelliJ IDEA prior to version 2026.2 allows unauthorized input injection during Remote Development sessions, enabling attackers to execute arbitrary code. Immediate patching is required to mitigate this high-severity risk.
Read full advisory →CVE-2026-64813
2026-08-13
Critical Vulnerability in JetBrains IntelliJ IDEA Allows Unauthorized Settings Modification (CVE-2026-64813)
A critical vulnerability in JetBrains IntelliJ IDEA and Remote Development platforms enables unauthorized modification of settings during remote sessions. Immediate patching required for versions prior to 2026.2.
Read full advisory →CVE-2026-60366
2026-08-13
Critical Remote Code Execution Vulnerability in Oracle Platform Security for Java (CVE-2026-60366)
A critical vulnerability in Oracle Platform Security for Java allows unauthenticated attackers to execute arbitrary code remotely. Affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Fusion Middleware. Immediate patching is required to prevent system compromise.
Read full advisory →CVE-2026-47056
2026-08-13
Critical Remote Code Execution Vulnerability in Oracle Data Integrator (CVE-2026-47056)
A critical vulnerability in Oracle Data Integrator allows unauthenticated attackers to take control of affected systems via HTTP. Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. Immediate patching is required to mitigate this high-severity risk.
Read full advisory →CVE-2026-60217
2026-08-13
Critical Remote Code Execution Vulnerability in Oracle Coherence (CVE-2026-60217)
A critical vulnerability in Oracle Coherence allows unauthenticated attackers to execute arbitrary code remotely. Affects multiple versions of Oracle Fusion Middleware. Immediate patching required to prevent system compromise.
Read full advisory →CVE-2026-60358
2026-08-13
Critical Remote Code Execution Vulnerability in Oracle Access Manager (CVE-2026-60358)
A critical vulnerability in Oracle Access Manager allows unauthenticated attackers to take over systems via HTTP. Affects versions 12.2.1.4.0 and 14.1.2.1.0. Immediate patching required due to high exploitability and severe impact.
Read full advisory →CVE-2026-60360
2026-08-13
Critical Remote Code Execution Vulnerability in Oracle Unified Directory (CVE-2026-60360)
A critical vulnerability in Oracle Unified Directory allows unauthenticated attackers to take control of affected systems via LDAP. Oracle Fusion Middleware users running specific versions are advised to apply patches immediately.
Read full advisory →CVE-2026-60365
2026-08-13
Critical Remote Code Execution Vulnerability in Oracle WebLogic Server Proxy Plug-in (CVE-2026-60365)
A critical vulnerability in Oracle WebLogic Server Proxy Plug-in allows unauthenticated attackers to execute arbitrary code remotely. Affects versions 15.1.1.0.0. Immediate patching is required to mitigate exploitation risks.
Read full advisory →CVE-2026-60379
2026-08-13
Critical Remote Code Execution Vulnerability in Oracle Service Delivery Platform (CVE-2026-60379)
A critical vulnerability in Oracle Service Delivery Platform allows unauthenticated attackers to execute arbitrary code via SOAP requests. Affects versions 12.2.1.4.0 and 14.1.2.0.0. Immediate patching is strongly recommended to prevent system compromise.
Read full advisory →CVE-2026-45336
2026-08-13
Critical Authentication Bypass Vulnerability in HireFlow (CVE-2026-45336)
HireFlow versions 1.2 and earlier contain a hard-coded Flask secret key, enabling unauthenticated attackers to forge administrative session cookies. Immediate upgrade to version 1.3 is required to mitigate this critical risk.
Read full advisory →CVE-2026-56699
2026-08-13
Critical Vulnerability in Wazuh Manager and OpenSearch Allows Arbitrary NDJSON Injection (CVE-2026-56699)
A critical vulnerability in Wazuh Manager and OpenSearch (CVE-2026-56699) allows enrolled agents to inject malicious NDJSON operations via unescaped DataValue.index fields. This enables unauthorized data deletion, alert tampering, and SIEM state manipulation. CVSS score: 10.0. Immediate patching is required.
Read full advisory →Get These Delivered to Your Inbox
Subscribe to receive advisories as soon as they are published — filtered to your environment.