Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

1078 advisories match Clear all Export 25 shown as CSV

Expand	Severity	Score	Advisory	Title	Source	Published
	Critical	9.1	CVE-2026-114820	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Oracle CorporationOracle Corporation Oracle Java SE, Oracle Corporation Oracle GraalVM for JDK, Oracle Corporation Oracle GraalVM Enterprise Edition	NVD	Oct 24 19:17 UTC
CVE-2026-114820Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Executive summary A flaw in the JSSE component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition could let an unauthenticated attacker over the network access or change critical data. The advisory rates it 9.1 out of 10 under CVSS 3.1, which is critical severity. The advisory does not describe a fix or update recommendation in the text provided, so defenders should check the vendor's advisory for patch guidance. Technical summary The advisory describes a vulnerability in the JSSE (Java Secure Socket Extension) component that can be exploited through APIs, for example via a web service that supplies data to those APIs, and across multiple protocols over the network. No authentication or user interaction is required, and the CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N with a base score of 9.1. Affected versions are listed as Oracle Java SE 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2 and 27.0.1.0.2, Oracle GraalVM for JDK 17.0.21.0.2 and 21.0.13.0.2, and Oracle GraalVM Enterprise Edition 21.3.20.0.2. The advisory also notes Java deployments such as sandboxed Web Start applications and applets that run untrusted code are affected. Fixed versions, workarounds, and detection guidance are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affects Oracle Corporation Oracle Corporation Oracle Java SE Oracle Corporation Oracle GraalVM for JDK Oracle Corporation Oracle GraalVM Enterprise Edition NIST National Vulnerability DatabasePublished Oct 24, 2026 19:17 UTC Read the advisory
	Critical	9.1	CVE-2026-91403	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Oracle CorporationOracle Corporation Oracle Java SE, Oracle Corporation Oracle GraalVM for JDK, Oracle Corporation Oracle GraalVM Enterprise Edition	NVD	Oct 21 22:16 UTC
CVE-2026-91403Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) From the advisory Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and 21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affects Oracle Corporation Oracle Corporation Oracle Java SE Oracle Corporation Oracle GraalVM for JDK Oracle Corporation Oracle GraalVM Enterprise Edition NIST National Vulnerability DatabasePublished Oct 21, 2026 22:16 UTC Read the advisory
	High	8.8	CVE-2026-91668	Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository) Oracle CorporationOracle Corporation Oracle Data Integrator	NVD	Oct 20 22:21 UTC
CVE-2026-91668Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository) From the advisory Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Data Integrator NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.8	CVE-2026-91665	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91665Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	7.5	CVE-2026-91664	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91664Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Essbase. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.9	CVE-2026-91663	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91663Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	6.4	CVE-2026-91662	Vulnerability in Oracle Essbase (component: Java Based Agent) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91662Vulnerability in Oracle Essbase (component: Java Based Agent) From the advisory Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityNone How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	7.7	CVE-2026-91661	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91661Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	4.3	CVE-2026-91660	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91660Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). Impact if exploited ConfidentialityNone IntegrityNone AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	7.7	CVE-2026-91659	Vulnerability in Oracle Essbase (component: Build) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91659Vulnerability in Oracle Essbase (component: Build) From the advisory Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.9	CVE-2026-91658	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91658Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	4.3	CVE-2026-91657	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91657Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.1	CVE-2026-91656	Vulnerability in Oracle Essbase (component: Federated Partitions) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91656Vulnerability in Oracle Essbase (component: Federated Partitions) From the advisory Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.1	CVE-2026-91655	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91655Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	6.3	CVE-2026-91654	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91654Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Essbase accessible data as well as unauthorized read access to a subset of Oracle Essbase accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	8.5	CVE-2026-91653	Vulnerability in Oracle Essbase (component: Essbase Web Platform) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91653Vulnerability in Oracle Essbase (component: Essbase Web Platform) From the advisory Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.0	CVE-2026-91652	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91652Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	8.5	CVE-2026-91651	Vulnerability in Oracle Essbase (component: Essbase Web Platform) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91651Vulnerability in Oracle Essbase (component: Essbase Web Platform) From the advisory Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Low	3.7	CVE-2026-91650	Vulnerability in Oracle Essbase (component: Java Based Agent) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91650Vulnerability in Oracle Essbase (component: Java Based Agent) From the advisory Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	6.0	CVE-2026-91649	Vulnerability in Oracle Essbase (component: Java Based Agent) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91649Vulnerability in Oracle Essbase (component: Java Based Agent) From the advisory Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N). Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required High User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.3	CVE-2026-91648	Vulnerability in Oracle Essbase (component: Java Based Agent) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91648Vulnerability in Oracle Essbase (component: Java Based Agent) From the advisory Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	8.1	CVE-2026-91647	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91647Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.6	CVE-2026-91646	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91646Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Essbase accessible data as well as unauthorized read access to a subset of Oracle Essbase accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L). Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.3	CVE-2026-91645	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91645Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.3	CVE-2026-91644	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91644Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data. CVSS 3.1 Base Score 9.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited