Critical severity vulnerabilities

23,847 CVEs scored 9.0 to 10.0 on CVSS. Critical vulnerabilities can usually be exploited remotely, without a login, to take over the affected system. Patch these first.

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62635Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62634Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62633Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62632Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62630Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.4 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62629Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62626Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62624Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62622Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62621Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.3 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62618Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62617Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62614Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62611Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.1 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62610Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.8 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62609Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.9 Critical severity

  Oracle Reports Developer: Improper Access Control

  CVE-2026-62608Aug 18, 2026Oracle

  Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 9.8 Critical severity

  Siebel CRM Integration: Improper Access Control

  CVE-2026-62592Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compro

• 9.9 Critical severity

  Siebel CRM Integration: Improper Access Control

  CVE-2026-62588Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comprom

• 9.8 Critical severity

  Siebel CRM Administration: Improper Access Control

  CVE-2026-62585Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compro

• 9.6 Critical severity

  Oracle Hyperion Calculation Manager: Improper Access Control

  CVE-2026-62582Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 9.8 Critical severity

  Oracle Hyperion Infrastructure Technology: Improper Access Control

  CVE-2026-62544Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

• 9.8 Critical severity

  Oracle Hyperion Infrastructure Technology: Improper Access Control

  CVE-2026-62543Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

• 9.8 Critical severity

  Oracle Hyperion Infrastructure Technology: Improper Access Control

  CVE-2026-62541Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

• 9.8 Critical severity

  Oracle Hyperion Infrastructure Technology: Improper Access Control

  CVE-2026-62539Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

• 9.9 Critical severity

  Siebel CRM Cloud Applications: Improper Access Control

  CVE-2026-62512Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 9.6 Critical severity

  Oracle Hyperion Infrastructure Technology: Improper Access Control

  CVE-2026-62463Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network a

• 9.8 Critical severity

  Oracle Hyperion Infrastructure Technology: Improper Access Control

  CVE-2026-62457Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 9.9 Critical severity

  Siebel CRM Cloud Applications: Improper Access Control

  CVE-2026-62452Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 9.8 Critical severity

  Siebel CRM Cloud Applications: Improper Access Control

  CVE-2026-61318Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 9.9 Critical severity

  Siebel CRM Cloud Applications: Improper Access Control

  CVE-2026-61317Aug 18, 2026Oracle

  Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 9.8 Critical severity

  JD Edwards EnterpriseOne Tools: Improper Access Control

  CVE-2026-61272Aug 18, 2026Oracle

  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via H

• 9.8 Critical severity

  Oracle Internet Directory: Improper Access Control

  CVE-2026-61258Aug 18, 2026Oracle

  Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network a

• 9.9 Critical severity

  Oracle Internet Directory: Improper Access Control

  CVE-2026-61248Aug 18, 2026Oracle

  Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network ac

• 10.0 Critical severity

  Oracle Internet Directory: Improper Access Control

  CVE-2026-61241Aug 18, 2026Oracle

  Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network a

• 9.9 Critical severity

  Oracle Hyperion Calculation Manager: Improper Access Control

  CVE-2026-61206Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 9.9 Critical severity

  Oracle Identity Manager: Improper Access Control

  CVE-2026-61066Aug 18, 2026Oracle

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 9.1 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61034Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acce

• 9.0 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61029Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network ac

• 9.9 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61021Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces