Advisories · Weakness

Authentication bypass.

Getting in without valid credentials: missing or broken authentication, sessions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-91534 CVE record

CVSS 8.6 High

Missing authentication in Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91532 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Applications Manager
- Oracle Corporation Oracle Applications Manager
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91521 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91515 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91506 CVE record

CVSS 8.1 High

Missing authentication in Oracle Corporation Workflow
- Oracle Corporation Workflow
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91502 CVE record

CVSS 7.3 High

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91495 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebCenter Content
- Oracle Corporation Oracle WebCenter Content
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91493 CVE record

CVSS 7.5 High

Improper authentication in Oracle Corporation Oracle Identity Manager Connector
- Oracle Corporation Oracle Identity Manager Connector
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91491 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Identity Manager Connector
- Oracle Corporation Oracle Identity Manager Connector
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91490 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Identity Manager Connector
- Oracle Corporation Oracle Identity Manager Connector
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91476 CVE record

CVSS 5.3 Medium

Missing authentication in Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil
- Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91467 CVE record

CVSS 6.6 Medium

Improper authentication in Oracle Corporation Oracle Fusion Middleware Control
- Oracle Corporation Oracle Fusion Middleware Control
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91450 CVE record

CVSS 7.4 High

Missing authentication in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91449 CVE record

CVSS 7.4 High

Missing authentication in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91445 CVE record

CVSS 8.2 High

Missing authentication in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91442 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91433 CVE record

CVSS 7.2 High

Missing authentication in Oracle Corporation Siebel Apps - Field Service
- Oracle Corporation Siebel Apps - Field Service
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91430 CVE record

CVSS 6.5 Medium

Missing authentication in Oracle Corporation Siebel Apps - Financial Services
- Oracle Corporation Siebel Apps - Financial Services
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91408 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Identity Manager
- Oracle Corporation Oracle Identity Manager
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91407 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Identity Manager
- Oracle Corporation Oracle Identity Manager
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91392 CVE record

CVSS 3.7 Low

Missing authentication in Oracle Corporation Siebel CRM End User
- Oracle Corporation Siebel CRM End User
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91358 CVE record

CVSS 8.2 High

Missing authentication in Oracle Corporation Oracle Business Process Management Suite
- Oracle Corporation Oracle Business Process Management Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91323 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91313 CVE record

CVSS 8.1 High

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91310 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91305 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91295 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91282 CVE record

CVSS 5.9 Medium

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91274 CVE record

CVSS 6.5 Medium

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91270 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91267 CVE record

CVSS 8.6 High

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91265 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91259 CVE record

CVSS 8.8 High

Improper authentication in Oracle Corporation Oracle Identity Manager
- Oracle Corporation Oracle Identity Manager
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91239 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91236 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91235 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91234 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91233 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91231 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91222 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper authentication in Oracle Corporation Oracle Business Process Management Suite
- Oracle Corporation Oracle Business Process Management Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91220 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Business Process Management Suite
- Oracle Corporation Oracle Business Process Management Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91214 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-91213 CVE record

CVSS 8.8 High

Improper authentication in Oracle Corporation Oracle Business Process Management Suite
- Oracle Corporation Oracle Business Process Management Suite
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87419 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Service Bus
- Oracle Corporation Oracle Service Bus
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87404 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation Pasta
- Oracle Corporation Pasta
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87314 CVE record

CVSS 7.4 High

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87313 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools
- Oracle Corporation JD Edwards EnterpriseOne Tools
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87302 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87292 CVE record

CVSS 3.7 Low

Improper authentication in Oracle Corporation Oracle Java SE and others
- Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle GraalVM for JDK
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87291 CVE record

CVSS 5.3 Medium

Improper authentication in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87263 CVE record

CVSS 8.8 High

Improper authentication in Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87255 CVE record

CVSS 3.7 Low

Improper authentication in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-87251 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Access Manager
- Oracle Corporation Oracle Access Manager
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-83426 CVE record

CVSS 8.7 High

Improper authentication in Oracle Corporation Oracle Access Manager
- Oracle Corporation Oracle Access Manager
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-83409 CVE record

CVSS 8.1 High

Improper authentication in Oracle Corporation Oracle Access Manager
- Oracle Corporation Oracle Access Manager
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-83404 CVE record

CVSS 7.5 High

Missing authentication in Oracle Corporation MySQL Connectors
- Oracle Corporation MySQL Connectors
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-83399 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle WebLogic Server
- Oracle Corporation Oracle WebLogic Server
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-83398 CVE record

CVSS 8.2 High

Missing authentication in Oracle Corporation Oracle Data Integrator
- Oracle Corporation Oracle Data Integrator
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-83397 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Data Integrator
- Oracle Corporation Oracle Data Integrator
- Authentication bypass
Not analysed yet 20 Oct 2026
CVE-2026-83396 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Data Integrator
- Oracle Corporation Oracle Data Integrator
- Authentication bypass
Not analysed yet 20 Oct 2026