CVE-2026-87337

Oracle Fusion Middleware Vulnerabilities Include Four CVSS 10 Bugs

Do Son October 21, 2026

TL;DR Oracle patched 203 Oracle Fusion Middleware vulnerabilities in its October 2026 Critical Patch Update. Four of...

Oracle Critical Patch Update October 2026 Fixes 1,209 CVEs Oracle Critical Patch Update for October 2026 fixes 1,209 CVEs, including six CVSS 10.0 bugs such as CVE-2026-101809 in E-Business Suite.

Oracle Critical Patch Update for October 2026 fixes 1,209 CVEs, including six CVSS 10.0 bugs such as CVE-2026-101809 in E-Business Suite.

Oracle Critical Patch Update October 2026 Fixes 1,209 CVEs

Do Son October 21, 2026

TL;DR The Oracle Critical Patch Update for October 2026 ships 1,295 security updates that fix 1,209 unique...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2026-109619CVSS 9.2
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not...
Admin intel📅 Updated: Oct 22, 2026
CVE-2026-109618CVSS 9.2
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request....
Admin intel📅 Updated: Oct 22, 2026
CVE-2014-125131CVSS 5.1
DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2015-20124CVSS 8.7
Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2016-20102CVSS 5.1
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying...
Watchtower Verified📅 Updated: Oct 22, 2026

CVE-2026-112327CVSS 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows...
📅 Updated: Oct 22, 2026
CVE-2026-15143CVSS 9.3
A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to...
📅 Updated: Oct 22, 2026
CVE-2026-114220CVSS 9.3
NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a...
📅 Updated: Oct 22, 2026
CVE-2026-114219CVSS 9.1
NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded...
📅 Updated: Oct 22, 2026
CVE-2026-107081CVSS 9.8
SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php,...
📅 Updated: Oct 22, 2026
CVE-2026-109619CVSS 9.2
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not...
Admin intel📅 Updated: Oct 22, 2026
CVE-2026-109618CVSS 9.2
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request....
Admin intel📅 Updated: Oct 22, 2026
CVE-2026-112005CVSS 9.2
WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary...
📅 Updated: Oct 22, 2026