PULSE
EN
FEED
ransomrhysida reclama a Here at Pope and Johnson County Title Company · Financial Servicesransomorova reclama a MARDEC Berhad · MY · Manufacturingransomorova reclama a Hydrogel Vision Corporation · US · Healthcareransomorova reclama a Raffles United Holdings Pte Ltd · SG · Hospitalityransomobsoft reclama a Company #2 · KRransomobsoft reclama a New Victim Company #6ransompixelleaks reclama a Unnamed · ITransompayload reclama a Stahlbau Mann GmbH · DE · Manufacturingransomn0n reclama a Company #122 · USransomn0n reclama a Company #121 · USransomn0n reclama a Company #120 · USransomn0n reclama a Company #119ransomn0n reclama a Company #118 · AEransomnightspire reclama a REFSA S.A. · AR · Otherransomrhysida reclama a Here at Pope and Johnson County Title Company · Financial Servicesransomorova reclama a MARDEC Berhad · MY · Manufacturingransomorova reclama a Hydrogel Vision Corporation · US · Healthcareransomorova reclama a Raffles United Holdings Pte Ltd · SG · Hospitalityransomobsoft reclama a Company #2 · KRransomobsoft reclama a New Victim Company #6ransompixelleaks reclama a Unnamed · ITransompayload reclama a Stahlbau Mann GmbH · DE · Manufacturingransomn0n reclama a Company #122 · USransomn0n reclama a Company #121 · USransomn0n reclama a Company #120 · USransomn0n reclama a Company #119ransomn0n reclama a Company #118 · AEransomnightspire reclama a REFSA S.A. · AR · Other
← Todos los CVEs
CVE Watch25 oct 2026

CVE-2026-46888

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade). Supported versions that are affected

CVSS

7.8

Alto

EPSS

0.1%

p2

KEV

—

Exploit Today

1

0-100

Publicado: 17 jun 2026 · Última mod.: 25 oct 2026 · CWE-284

EPSS · 30d
0.1%EPSS · 30 días0.2%
2026-10-052026-11-02
Descripción técnica

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-169007.5 ALT
—
——0Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.4hCVE-2026-135949.1 CRÍ
—
——0Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.4hCVE-2026-1205033.3 BAJ
—
——0A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0. This affects an unknown part of the file /api/status of the component Public API. The manipulation results in information disclosure. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 1.8.1 is able to mitigate this issue. The patch is identified as 9317a89aa0fd2715d9c2bd27bdbb52b5d228dd9e. Upgrading the affected component is recommended.15hCVE-2026-285888.4 ALT
—
——0In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.7hCVE-2026-115654—
—
——0In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-mode, memory-protected module belongs to that module. Any loaded module can suspend, resume, terminate, reset or re-prioritise application threads and other modules' threads and abort their waits, denying service or changing how the system schedules them.17hCVE-2026-1203234.3 MED
—
——0A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.7. Impacted is an unknown function of the file src/utils/passthroughHeaders.ts. The manipulation of the argument passthroughHeaders results in information disclosure. The attack may be launched remotely. Upgrading to version 1.1.8 is recommended to address this issue. The patch is identified as 040f7b9ae004070bdfe5084cde6bc2c609f78e76. It is advisable to upgrade the affected component.21h