[vulnfeed] 101 critical CVEs — 2026-10-20 20:00 UTC
vulnfeed
Critical alert — 2026-10-20 23:18 UTC
101 new critical CVEs
in the last 5 hours — 101 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-101809CRITICAL
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). S
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability a
CVSS 10.0
CVE-2026-81212CRITICAL
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption b
CVSS 10.0
CVE-2026-87337CRITICAL
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engi
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploita
CVSS 10.0
CVE-2026-91216CRITICAL
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supporte
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerabil
CVSS 10.0
CVE-2026-91221CRITICAL
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supporte
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerabil
CVSS 10.0
CVE-2026-91231CRITICAL
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported ve
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability
CVSS 10.0
CVE-2026-91299CRITICAL
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orc
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily ex
CVSS 10.0
CVE-2026-113708CRITICAL
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from remote resource, base
CVSS 9.9
CVE-2026-113709CRITICAL
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kustomize build, helmGlo
CVSS 9.9
CVE-2026-101446CRITICAL
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manag
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability
CVSS 9.9
CVE-2026-101501CRITICAL
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affe
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network
CVSS 9.9
CVE-2026-101503CRITICAL
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affe
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network
CVSS 9.9
CVE-2026-101528CRITICAL
Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (compo
Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected are 13.5 and 24.1. Ea
CVSS 9.9
CVE-2026-101529CRITICAL
Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (compo
Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected are 13.5 and 24.1. Ea
CVSS 9.9
CVE-2026-91222CRITICAL
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component:
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0
CVSS 9.9
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: