PULSEUnderground Intel

EN VIVO12señales / 24h

FEED

ransomdeadlock reclama a Coopebis · CR · Agriculture and Food Productionransomakira reclama a Calmont Wire & Cable · CA · Manufacturingransomeclipse reclama a globalair.com.sg · SG · Transportationransomdeadlock reclama a Trinity Custom Homes - USA · US · Manufacturingransomdeadlock reclama a Chonlatee · THransomdeadlock reclama a Kadick · USransomincransom reclama a q-technicians.be · BE · Professional Servicesransomincransom reclama a bpcm.com · US · Professional Servicesransomincransom reclama a www.bogard.com.mx · MX · Otherransomwhitearmor reclama a Clínica La Sagrada Familia (Colombia) · CO · Healthcareransombyod reclama a ???ransombyod reclama a Twitter · US · Technologyransomn0n reclama a Company #147 · USransomn0n reclama a Company #146 · USransomdeadlock reclama a Coopebis · CR · Agriculture and Food Productionransomakira reclama a Calmont Wire & Cable · CA · Manufacturingransomeclipse reclama a globalair.com.sg · SG · Transportationransomdeadlock reclama a Trinity Custom Homes - USA · US · Manufacturingransomdeadlock reclama a Chonlatee · THransomdeadlock reclama a Kadick · USransomincransom reclama a q-technicians.be · BE · Professional Servicesransomincransom reclama a bpcm.com · US · Professional Servicesransomincransom reclama a www.bogard.com.mx · MX · Otherransomwhitearmor reclama a Clínica La Sagrada Familia (Colombia) · CO · Healthcareransombyod reclama a ???ransombyod reclama a Twitter · US · Technologyransomn0n reclama a Company #147 · USransomn0n reclama a Company #146 · US

← Todos los CVEs

CVE Watch22 oct 2026

CVE-2026-62577

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The

CVSS

3.3

Bajo

EPSS

0.1%

p3

KEV

—

Exploit Today

1

0-100

Publicado: 18 ago 2026 · Última mod.: 22 oct 2026 · CWE-284

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-102026-11-08

Descripción técnica

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Referencias oficiales

www.oracle.comhttps://www.oracle.com/security-alerts/cspuaug2026.html

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-27004.3 MED

——0IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows low-privileged users to execute administrative functions by directly invoking backend APIs.As a result, UI-level access restrictions are ineffective, as the backend fails to enforce role-based access control.4h CVE-2026-1144649.3 CRÍ

——0IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.6h CVE-2026-1244586.5 MED

——0OpenEMR before 8.4.0 contains an authorization bypass vulnerability in the FHIR GET /fhir/Person/:uuid route that allows patient-portal users to read any staff member's demographics by bypassing compartment enforcement. Attackers holding a patient SMART token with patient/Person.read can harvest staff Person UUIDs from Appointment references to retrieve names, home addresses, phone numbers, and personal emails.9h CVE-2026-971922.7 BAJ

——1The Secure Custom Fields WordPress plugin before 6.9.8 does not re-apply its field-group location rules when persisting values submitted through the post editor save path, allowing users with contributor-level access and above to write custom fields the site restricted to administrators onto their own posts.4h CVE-2026-1059705.3 MED

——2The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin through 2.0.1 does not properly verify the authenticity of incoming bank-transfer payment notifications on a default installation, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid.4h CVE-2026-1236036.5 MED

——2hickory-proto and hickory-resolver 0.26.0 before 0.26.2, hickory-server 0.25.0-alpha.1 before 0.26.2, and hickory-recursor 0.25.0-alpha.3 through 0.26.0-alpha.1 fail to canonicalize IPv4-mapped IPv6 addresses when checking deny_answers, deny_server, or AccessControlSet rules. Attackers can use IPv4-mapped addresses to evade answer filtering, trigger queries to denied nameservers, or reach hickory-server library deployments on dual-stack IPv6 sockets from denied clients.21h