VDB
GCVE-110-NCSC-2026-446
GCVE-110-NCSC-2026-446
Advisory PublishedCVSS 8.8/10
Multiple critical vulnerabilities in Oracle Fusion Middleware products and Apache SOAP's default configuration allow unauthenticated attackers to fully compromise systems or execute remote code, with CVSS scores up to 9.8.
Weaknesses (CWE)
CWE-306Missing Authentication for Critical FunctionCWE-787Out-of-bounds Write
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Oracle | vers:unknown/* | — | — |
Aliases
CVE-2022-45378CVE-2025-15467CVE-2026-87305CVE-2026-87306CVE-2026-87309CVE-2026-87310CVE-2026-87313CVE-2026-91265CVE-2026-91266CVE-2026-91267CVE-2026-91268CVE-2026-91269CVE-2026-91270CVE-2026-91271CVE-2026-91273CVE-2026-91286CVE-2026-91287CVE-2026-91295CVE-2026-91296CVE-2026-91303CVE-2026-91305CVE-2026-91310CVE-2026-91313CVE-2026-91326
Browse GCVE Records
774 records in the GCVE database · Updated October 31, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.