CVE-2026-87294 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw with low complexity and no required privileges or user interaction, causing limited confidentiality and integrity impacts but no availability impact. No public exploit or known active exploitation is reported. No patch or remediation details are provided in the available data.
A medium severity vulnerability (CVE-2026-87293) exists in Oracle Java SE's RMI component affecting multiple OpenJDK 8 versions. The flaw allows remote attackers to cause partial confidentiality and integrity loss without authentication. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a network attack vector with high attack complexity and no privileges required. No public exploits or known active exploitation have been reported. Affected versions include specific OpenJDK 8 update builds primarily found in Ubuntu distributions.
CVE-2026-87290 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed with Ubuntu 16.04 through 26.04 LTS. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high complexity and no privileges required, resulting in high confidentiality impact but no integrity or availability impact. No public exploits or known active exploitation have been reported.
CVE-2026-113730 is a medium severity vulnerability in the OGNL (Object Graph Navigation Library) for Java affecting specific versions 2.7.3-5 through 2.7.3-9. The vulnerability has a CVSS score of 5.6, indicating a network attack vector with high attack complexity and no privileges or user interaction required, impacting confidentiality, integrity, and availability to a low extent. No public exploit or known active exploitation is reported. The affected versions are explicitly identified, but no patch or remediation details are provided in the available data.
A high-severity vulnerability (CVE-2026-83404) affects multiple specific versions of the MySQL Connector/Python product from Oracle MySQL. The flaw has a CVSS 3.1 base score of 7.5, indicating it can be exploited remotely without privileges or user interaction to cause a high impact on confidentiality. The vulnerability was published on October 23, 2026. No public exploits or known active exploitation have been reported. The affected versions are explicitly listed and include various builds from versions 2.0.4-1 through 26.7.0-1.
CVE-2026-83400 is a medium severity vulnerability affecting specific versions of OpenJDK 8. The flaw impacts availability without compromising confidentiality or integrity. It has a CVSS 3.1 base score of 5.3, indicating a network-exploitable issue that requires no privileges or user interaction. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.
CVE-2026-83395 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw with low attack complexity, no privileges required, and no user interaction. The impact includes no confidentiality loss but includes integrity and availability impacts.
CVE-2026-83387 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high complexity and no privileges required, resulting in high confidentiality impact but no integrity or availability impact.
CVE-2026-83380 is a medium severity vulnerability affecting multiple specific builds of OpenJDK 8, including versions distributed with Ubuntu 16.04, 18.04, 20.04, 22.04, and 24.04 LTS. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.3, indicating a network exploitable flaw with low impact on confidentiality and no impact on integrity or availability. No public exploits or known active exploitation have been reported.
CVE-2026-83374 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including various Ubuntu package versions. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high attack complexity and no privileges or user interaction required. The impact is limited to integrity, with no confidentiality or availability impact reported.
A low severity vulnerability exists in the MySQL Connectors component of Oracle MySQL 5.5, affecting multiple specific Ubuntu package versions. The vulnerability has a CVSS 3.1 base score of 2.5, indicating low impact primarily on availability with no confidentiality or integrity impact. It requires local attack vector with high attack complexity and no privileges, and user interaction is needed. No known exploits are reported in the wild. The affected versions are specific Ubuntu builds of MySQL 5.5. No patch or remediation information is provided in the data.
CVE-2026-101803 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the Server XML component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. The vulnerability is classified as medium severity. Oracle has included this issue in its October 2026 Critical Patch Update, which contains numerous security patches across many products. No public exploit code or in-the-wild exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.
CVE-2026-101788 is a medium severity vulnerability affecting multiple versions of MySQL Server and MySQL Cluster, including versions 5.5.32 through 5.5.57 on Ubuntu 14.04. The vulnerability is part of a large set of security issues addressed in Oracle's October 2026 Critical Patch Update. Oracle strongly recommends applying the available patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101773 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Group Replication Plugin. It impacts MySQL versions 8.0, 8.4, and 9.7, as well as multiple Ubuntu-packaged versions of MySQL 5.5. The vulnerability was publicly disclosed in October 2026 and is rated with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security fixes across Oracle products. There are no known exploits in the wild at this time.
A high-severity vulnerability (CVE-2026-101768) affects specific versions of the MySQL Connectors product in Oracle MySQL 5.5. This vulnerability has a CVSS 3.1 score of 8.1, indicating a network exploitable flaw requiring high attack complexity with no privileges or user interaction needed. The impact includes high confidentiality, integrity, and availability losses. The affected versions are specific Ubuntu-packaged builds of MySQL 5.5. No public exploits or patches are currently documented.
CVE-2026-101753 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically impacting MySQL version 9.7 and various Ubuntu-packaged versions of MySQL 5.5. The vulnerability is publicly known and has been included in Oracle's October 2026 Critical Patch Update, which addresses numerous security issues across Oracle products. No public exploit code or in-the-wild exploitation has been reported. The severity is assessed as medium. Oracle strongly recommends applying available security patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101733 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the JSON server component. It impacts MySQL versions 8.0, 8.4, and 9.7. The vulnerability has been publicly disclosed and is classified with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across multiple products including MySQL. Oracle strongly recommends applying the available patches promptly to mitigate the risk. There are no known exploits in the wild at this time.
CVE-2026-101732 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7. The vulnerability is recognized and addressed in Oracle's October 2026 Critical Patch Update, which includes numerous security patches across Oracle products. There is no public exploit known in the wild for this vulnerability. Oracle strongly recommends applying the available patches promptly to mitigate potential risks.
CVE-2026-101731 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 5.5 package versions. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across various Oracle products. No public exploit code or in-the-wild exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.
CVE-2026-101730 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 5.5 builds. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across various Oracle products. No public exploit code or in-the-wild exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.