VENDOR

Oracle vulnerabilities: CVEs, exploitation and patches

Every Oracle CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-70757
Oracle WebLogic Server unauthenticated remote code execution via T3/IIOP Oracle Oracle WebLogic Server · Sep 30, 2026
CRITICAL 9.8
CVE-2026-70748
Oracle WebLogic Server unauthenticated remote takeover via T3/IIOP Oracle Oracle WebLogic Server · Sep 30, 2026
CRITICAL 9.8
CVE-2026-70756
Oracle WebLogic Server unauthenticated remote takeover via T3/IIOP Oracle Oracle WebLogic Server · Sep 30, 2026
CRITICAL 9.8
CVE-2026-83021
Oracle WebLogic Server unauthenticated HTTP remote takeover Oracle Oracle WebLogic Server · Sep 30, 2026
CRITICAL 10
CVE-2026-46817
Oracle E-Business Suite Payments unauthenticated takeover Oracle E-Business Suite · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PoC PUBLIC
CRITICAL 9.8