GCVE-110-NCSC-2026-26

Advisory PublishedCVSS 7.2/10

Vulnetix · Advisory published January 21, 2026

Recent vulnerabilities in Oracle JD Edwards, Oracle Middleware, Eclipse Jetty, HPE Telco IP Mediation, and SAP Commerce Cloud expose systems to unauthorized access and data corruption, with CVSS scores reaching 7.2.

Download JSON Open in Console

Weaknesses (CWE)

CWE-404Improper Resource Shutdown or ReleaseCWE-674Uncontrolled Recursion

Risk Scores

CVSS 3.1

7.2/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2024-13009 CVE-2025-48924

References

advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON