{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Oracle vulnerabilities","home_page_url":"https://patchfirst.co/vendor/oracle/","feed_url":"https://patchfirst.co/feed/vendor/oracle.json","description":"New and newly exploited Oracle CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-91403","url":"https://patchfirst.co/cve/CVE-2026-91403/","title":"CVE-2026-91403: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java…","content_text":"Oracle Corporation · Oracle Java SE. Not in CISA KEV. EPSS 0.4% (higher than 31.4% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 19.7 of 100.","summary":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-24T20:16:30.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":19.7,"kev":null,"epss":{"score":0.00375,"percentile":0.31447},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Java SE","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-101767","url":"https://patchfirst.co/cve/CVE-2026-101767/","title":"CVE-2026-101767: Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core)","content_text":"Oracle Corporation · Oracle Application Object Library. Not in CISA KEV. EPSS 0.6% (higher than 49.4% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 68.9 of 100.","summary":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":68.9,"kev":null,"epss":{"score":0.00614,"percentile":0.49379},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Application Object Library","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-101521","url":"https://patchfirst.co/cve/CVE-2026-101521/","title":"CVE-2026-101521: Vulnerability in Oracle APEX (component: General)","content_text":"Oracle Corporation · Oracle APEX. Not in CISA KEV. EPSS 0.6% (higher than 47.5% of CVEs). CVSS 9.8 CRITICAL. Priority 18.3 of 100.","summary":"Vulnerability in Oracle APEX (component: General)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:17:58.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.3,"kev":null,"epss":{"score":0.00576,"percentile":0.47511},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle APEX","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101809","url":"https://patchfirst.co/cve/CVE-2026-101809/","title":"CVE-2026-101809: Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)","content_text":"Oracle Corporation · Workflow. Not in CISA KEV. EPSS 0.5% (higher than 45.3% of CVEs). CVSS 10.0 CRITICAL. Priority 18.0 of 100.","summary":"Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-24T04:18:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18,"kev":null,"epss":{"score":0.00538,"percentile":0.45285},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Workflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101499","url":"https://patchfirst.co/cve/CVE-2026-101499/","title":"CVE-2026-101499: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)","content_text":"Oracle Corporation · Oracle WebCenter Sites. Not in CISA KEV. EPSS 0.5% (higher than 45.3% of CVEs). CVSS 9.8 CRITICAL. Priority 17.8 of 100.","summary":"Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.8,"kev":null,"epss":{"score":0.00538,"percentile":0.45285},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle WebCenter Sites","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101484","url":"https://patchfirst.co/cve/CVE-2026-101484/","title":"CVE-2026-101484: Vulnerability in Oracle Secure Backup (component: Backup and Restore)","content_text":"Oracle Corporation · Oracle Secure Backup. Not in CISA KEV. EPSS 0.5% (higher than 45.2% of CVEs). CVSS 9.8 CRITICAL. Priority 17.8 of 100.","summary":"Vulnerability in Oracle Secure Backup (component: Backup and Restore)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:17:58.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.8,"kev":null,"epss":{"score":0.00537,"percentile":0.45245},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Secure Backup","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101634","url":"https://patchfirst.co/cve/CVE-2026-101634/","title":"CVE-2026-101634: Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations)","content_text":"Oracle Corporation · Oracle Mobile Field Service. Not in CISA KEV. EPSS 0.6% (higher than 46.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.6 of 100.","summary":"Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T21:17:34.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.6,"kev":null,"epss":{"score":0.00561,"percentile":0.46653},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Mobile Field Service","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101763","url":"https://patchfirst.co/cve/CVE-2026-101763/","title":"CVE-2026-101763: Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component…","content_text":"Oracle Corporation · Oracle Communications BRM - Elastic Charging Engine. Not in CISA KEV. EPSS 0.5% (higher than 42.9% of CVEs). CVSS 9.8 CRITICAL. Priority 17.4 of 100.","summary":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.4,"kev":null,"epss":{"score":0.00501,"percentile":0.42878},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Communications BRM - Elastic Charging Engine","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91323","url":"https://patchfirst.co/cve/CVE-2026-91323/","title":"CVE-2026-91323: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)","content_text":"Oracle Corporation · Oracle WebLogic Server. Not in CISA KEV. EPSS 0.5% (higher than 42.6% of CVEs). CVSS 9.8 CRITICAL. Priority 17.3 of 100.","summary":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-27T04:18:00.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.3,"kev":null,"epss":{"score":0.00496,"percentile":0.42575},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83399","url":"https://patchfirst.co/cve/CVE-2026-83399/","title":"CVE-2026-83399: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)","content_text":"Oracle Corporation · Oracle WebLogic Server. Not in CISA KEV. EPSS 0.5% (higher than 42.6% of CVEs). CVSS 9.8 CRITICAL. Priority 17.3 of 100.","summary":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.3,"kev":null,"epss":{"score":0.00496,"percentile":0.42575},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91231","url":"https://patchfirst.co/cve/CVE-2026-91231/","title":"CVE-2026-91231: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.5% (higher than 41.6% of CVEs). CVSS 10.0 CRITICAL. Priority 17.2 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-29T18:17:38.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.00483,"percentile":0.41597},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91221","url":"https://patchfirst.co/cve/CVE-2026-91221/","title":"CVE-2026-91221: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.5% (higher than 41.6% of CVEs). CVSS 10.0 CRITICAL. Priority 17.2 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-29T19:17:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.00483,"percentile":0.41596},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91216","url":"https://patchfirst.co/cve/CVE-2026-91216/","title":"CVE-2026-91216: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.5% (higher than 41.6% of CVEs). CVSS 10.0 CRITICAL. Priority 17.2 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-30T14:25:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.00483,"percentile":0.41596},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101529","url":"https://patchfirst.co/cve/CVE-2026-101529/","title":"CVE-2026-101529: Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component…","content_text":"Oracle Corporation · Oracle Enterprise Manager for Oracle Database. Not in CISA KEV. EPSS 0.5% (higher than 41.4% of CVEs). CVSS 9.9 CRITICAL. Priority 17.1 of 100.","summary":"Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T14:29:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00479,"percentile":0.4136},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Oracle Database","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101528","url":"https://patchfirst.co/cve/CVE-2026-101528/","title":"CVE-2026-101528: Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component…","content_text":"Oracle Corporation · Oracle Enterprise Manager for Oracle Database. Not in CISA KEV. EPSS 0.5% (higher than 41.4% of CVEs). CVSS 9.9 CRITICAL. Priority 17.1 of 100.","summary":"Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T14:29:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00479,"percentile":0.41359},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Enterprise Manager for Oracle Database","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101503","url":"https://patchfirst.co/cve/CVE-2026-101503/","title":"CVE-2026-101503: Vulnerability in Oracle Trusted Answer Search (component: PLSQL package)","content_text":"Oracle Corporation · Oracle Trusted Answer Search. Not in CISA KEV. EPSS 0.5% (higher than 41.4% of CVEs). CVSS 9.9 CRITICAL. Priority 17.1 of 100.","summary":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T14:29:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00479,"percentile":0.41358},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91665","url":"https://patchfirst.co/cve/CVE-2026-91665/","title":"CVE-2026-91665: Vulnerability in Oracle Essbase (component: Security)","content_text":"Oracle Corporation · Oracle Essbase. Not in CISA KEV. EPSS 0.5% (higher than 40.6% of CVEs). CVSS 9.8 CRITICAL. Priority 16.9 of 100.","summary":"Vulnerability in Oracle Essbase (component: Security)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:20:33.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.9,"kev":null,"epss":{"score":0.0047,"percentile":0.4065},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Essbase","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91299","url":"https://patchfirst.co/cve/CVE-2026-91299/","title":"CVE-2026-91299: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT…","content_text":"Oracle Corporation · JD Edwards EnterpriseOne Orchestrator. Not in CISA KEV. EPSS 0.5% (higher than 40% of CVEs). CVSS 10.0 CRITICAL. Priority 16.9 of 100.","summary":"Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T12:18:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.9,"kev":null,"epss":{"score":0.00461,"percentile":0.39994},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Orchestrator","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-87251","url":"https://patchfirst.co/cve/CVE-2026-87251/","title":"CVE-2026-87251: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)","content_text":"Oracle Corporation · Oracle Access Manager. Not in CISA KEV. EPSS 0.5% (higher than 40.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.8 of 100.","summary":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.8,"kev":null,"epss":{"score":0.00463,"percentile":0.40129},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Access Manager","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91495","url":"https://patchfirst.co/cve/CVE-2026-91495/","title":"CVE-2026-91495: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)","content_text":"Oracle Corporation · Oracle WebCenter Content. Not in CISA KEV. EPSS 0.4% (higher than 39.2% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:45:11.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39155},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle WebCenter Content","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91236","url":"https://patchfirst.co/cve/CVE-2026-91236/","title":"CVE-2026-91236: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-30T14:23:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39111},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91235","url":"https://patchfirst.co/cve/CVE-2026-91235/","title":"CVE-2026-91235: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-30T14:23:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39112},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91234","url":"https://patchfirst.co/cve/CVE-2026-91234/","title":"CVE-2026-91234: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-30T14:23:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39113},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91233","url":"https://patchfirst.co/cve/CVE-2026-91233/","title":"CVE-2026-91233: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-30T14:24:01.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39111},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91220","url":"https://patchfirst.co/cve/CVE-2026-91220/","title":"CVE-2026-91220: Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human…","content_text":"Oracle Corporation · Oracle Business Process Management Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.2% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39154},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91214","url":"https://patchfirst.co/cve/CVE-2026-91214/","title":"CVE-2026-91214: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-30T14:25:36.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39111},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-87337","url":"https://patchfirst.co/cve/CVE-2026-87337/","title":"CVE-2026-87337: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)","content_text":"Oracle Corporation · Oracle Access Manager. Not in CISA KEV. EPSS 0.4% (higher than 38.2% of CVEs). CVSS 10.0 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T13:17:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.00439,"percentile":0.38167},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Access Manager","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83397","url":"https://patchfirst.co/cve/CVE-2026-83397/","title":"CVE-2026-83397: Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository…","content_text":"Oracle Corporation · Oracle Data Integrator. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39111},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Data Integrator","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83396","url":"https://patchfirst.co/cve/CVE-2026-83396/","title":"CVE-2026-83396: Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository…","content_text":"Oracle Corporation · Oracle Data Integrator. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39113},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Data Integrator","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-60432","url":"https://patchfirst.co/cve/CVE-2026-60432/","title":"CVE-2026-60432: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)","content_text":"Oracle Corporation · Oracle Solaris. Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.0045,"percentile":0.39112},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Solaris","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101446","url":"https://patchfirst.co/cve/CVE-2026-101446/","title":"CVE-2026-101446: Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager)","content_text":"Oracle Corporation · Siebel CRM Cloud Applications. Not in CISA KEV. EPSS 0.4% (higher than 38.9% of CVEs). CVSS 9.9 CRITICAL. Priority 16.6 of 100.","summary":"Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T14:29:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.6,"kev":null,"epss":{"score":0.00447,"percentile":0.389},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Siebel CRM Cloud Applications","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101537","url":"https://patchfirst.co/cve/CVE-2026-101537/","title":"CVE-2026-101537: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)","content_text":"Oracle Corporation · Oracle Solaris. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.8 CRITICAL. Priority 16.0 of 100.","summary":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16,"kev":null,"epss":{"score":0.0042,"percentile":0.3631},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Solaris","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101501","url":"https://patchfirst.co/cve/CVE-2026-101501/","title":"CVE-2026-101501: Vulnerability in Oracle Trusted Answer Search (component: PLSQL package)","content_text":"Oracle Corporation · Oracle Trusted Answer Search. Not in CISA KEV. EPSS 0.4% (higher than 35.3% of CVEs). CVSS 9.9 CRITICAL. Priority 15.9 of 100.","summary":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T14:29:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.9,"kev":null,"epss":{"score":0.00411,"percentile":0.3529},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Trusted Answer Search","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91638","url":"https://patchfirst.co/cve/CVE-2026-91638/","title":"CVE-2026-91638: Vulnerability in Oracle Essbase (component: Security)","content_text":"Oracle Corporation · Oracle Essbase. Not in CISA KEV. EPSS 0.4% (higher than 34.2% of CVEs). CVSS 9.9 CRITICAL. Priority 15.7 of 100.","summary":"Vulnerability in Oracle Essbase (component: Security)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T17:19:18.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.7,"kev":null,"epss":{"score":0.004,"percentile":0.34204},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Essbase","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91305","url":"https://patchfirst.co/cve/CVE-2026-91305/","title":"CVE-2026-91305: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)","content_text":"Oracle Corporation · JD Edwards EnterpriseOne Tools. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.","summary":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:20:33.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.0042,"percentile":0.36284},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91265","url":"https://patchfirst.co/cve/CVE-2026-91265/","title":"CVE-2026-91265: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure…","content_text":"Oracle Corporation · JD Edwards EnterpriseOne Tools. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.","summary":"Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:20:32.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.0042,"percentile":0.36284},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"JD Edwards EnterpriseOne Tools","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91222","url":"https://patchfirst.co/cve/CVE-2026-91222/","title":"CVE-2026-91222: Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human…","content_text":"Oracle Corporation · Oracle Business Process Management Suite. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 9.9 CRITICAL. Priority 15.5 of 100.","summary":"Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-29T19:17:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00389,"percentile":0.33051},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Business Process Management Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-87302","url":"https://patchfirst.co/cve/CVE-2026-87302/","title":"CVE-2026-87302: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)","content_text":"Oracle Corporation · Oracle WebLogic Server. Not in CISA KEV. EPSS 0.4% (higher than 35.9% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.","summary":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-30T04:18:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00416,"percentile":0.35913},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle WebLogic Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101765","url":"https://patchfirst.co/cve/CVE-2026-101765/","title":"CVE-2026-101765: Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component…","content_text":"Oracle Corporation · Oracle Communications Billing and Revenue Management. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.","summary":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.0042,"percentile":0.36285},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Communications Billing and Revenue Management","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101590","url":"https://patchfirst.co/cve/CVE-2026-101590/","title":"CVE-2026-101590: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security)","content_text":"Oracle Corporation · Helidon. Not in CISA KEV. EPSS 0.4% (higher than 36.3% of CVEs). CVSS 9.1 CRITICAL. Priority 15.5 of 100.","summary":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:17:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.0042,"percentile":0.36284},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Helidon","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91251","url":"https://patchfirst.co/cve/CVE-2026-91251/","title":"CVE-2026-91251: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 33% of CVEs). CVSS 9.9 CRITICAL. Priority 15.4 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T21:17:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.4,"kev":null,"epss":{"score":0.00389,"percentile":0.33002},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91250","url":"https://patchfirst.co/cve/CVE-2026-91250/","title":"CVE-2026-91250: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 33% of CVEs). CVSS 9.9 CRITICAL. Priority 15.4 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T21:17:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.4,"kev":null,"epss":{"score":0.00389,"percentile":0.33002},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91232","url":"https://patchfirst.co/cve/CVE-2026-91232/","title":"CVE-2026-91232: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 33% of CVEs). CVSS 9.9 CRITICAL. Priority 15.4 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-29T18:17:38.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.4,"kev":null,"epss":{"score":0.00389,"percentile":0.33002},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91341","url":"https://patchfirst.co/cve/CVE-2026-91341/","title":"CVE-2026-91341: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean…","content_text":"Oracle Corporation · Oracle Outside In Technology. Not in CISA KEV. EPSS 0.4% (higher than 35% of CVEs). CVSS 9.1 CRITICAL. Priority 15.3 of 100.","summary":"Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T19:19:20.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.3,"kev":null,"epss":{"score":0.00407,"percentile":0.35017},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Outside In Technology","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91225","url":"https://patchfirst.co/cve/CVE-2026-91225/","title":"CVE-2026-91225: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)","content_text":"Oracle Corporation · Oracle SOA Suite. Not in CISA KEV. EPSS 0.4% (higher than 35% of CVEs). CVSS 9.1 CRITICAL. Priority 15.3 of 100.","summary":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-30T14:24:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.3,"kev":null,"epss":{"score":0.00407,"percentile":0.35017},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle SOA Suite","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101808","url":"https://patchfirst.co/cve/CVE-2026-101808/","title":"CVE-2026-101808: Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI)","content_text":"Oracle Corporation · Oracle Product Workbench. Not in CISA KEV. EPSS 0.4% (higher than 34.7% of CVEs). CVSS 9.1 CRITICAL. Priority 15.2 of 100.","summary":"Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T18:44:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.2,"kev":null,"epss":{"score":0.00404,"percentile":0.34695},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Product Workbench","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91490","url":"https://patchfirst.co/cve/CVE-2026-91490/","title":"CVE-2026-91490: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)","content_text":"Oracle Corporation · Oracle Identity Manager Connector. Not in CISA KEV. EPSS 0.4% (higher than 33.8% of CVEs). CVSS 9.1 CRITICAL. Priority 15.1 of 100.","summary":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-27T14:21:37.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.1,"kev":null,"epss":{"score":0.00396,"percentile":0.33844},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-87347","url":"https://patchfirst.co/cve/CVE-2026-87347/","title":"CVE-2026-87347: Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module)","content_text":"Oracle Corporation · Oracle HTTP Server. Not in CISA KEV. EPSS 0.4% (higher than 31.5% of CVEs). CVSS 9.6 CRITICAL. Priority 14.9 of 100.","summary":"Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T14:17:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.9,"kev":null,"epss":{"score":0.00376,"percentile":0.31545},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle HTTP Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101420","url":"https://patchfirst.co/cve/CVE-2026-101420/","title":"CVE-2026-101420: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR)","content_text":"Oracle Corporation · PeopleSoft Enterprise PeopleTools. Not in CISA KEV. EPSS 0.4% (higher than 31.5% of CVEs). CVSS 9.6 CRITICAL. Priority 14.9 of 100.","summary":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-27T18:09:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.9,"kev":null,"epss":{"score":0.00375,"percentile":0.31501},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"PeopleSoft Enterprise PeopleTools","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91491","url":"https://patchfirst.co/cve/CVE-2026-91491/","title":"CVE-2026-91491: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)","content_text":"Oracle Corporation · Oracle Identity Manager Connector. Not in CISA KEV. EPSS 0.4% (higher than 29.2% of CVEs). CVSS 9.8 CRITICAL. Priority 14.6 of 100.","summary":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway)","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-27T14:22:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.6,"kev":null,"epss":{"score":0.00354,"percentile":0.29152},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle Corporation","product":"Oracle Identity Manager Connector","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}