CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
IXP Manager Privilege Escalation Vulnerability Advisory (CVE-2026-63339)
[Affected Scope] All IXP Manager versions prior to 7.3.0
[Impact] Authenticated non-admin users can elevate privileges to Administrator status, gaining full control over the IXP platform
[Mitigation] Immediate upgrade to version 7.3.0 or later is required
Zammad DEB/RPM Package Local Privilege Escalation Advisory (CVE-2026-102490)
[Affected Scope] Zammad installations using DEB or RPM packages built via packager.io (Source and Docker excluded).
[Impact] A local attacker with 'zammad' service account access can escalate to full 'root' privileges on the host.
[Mitigation] Immediately update Zammad to the latest patched version via package manager.
Oracle E-Business Suite Payments File Transmission Authentication Bypass and Remote Code Execution (CVE-2026-46817)
[Affected Scope] Oracle E-Business Suite (EBS) versions 12.2.3 through 12.2.15, specifically the Oracle Payments (File Transmission) component
[Impact] Unauthenticated remote attackers can bypass authentication via HTTP, leading to complete takeover of the Oracle Payments module
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, and restrict external HTTP access to the Payments module until patched