Vulnerability Intelligence

Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.

Published records349
Critical309
High30
Known exploited77

CVE-2026-28763

Critical9.1

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an…

Stack buffer overflowRemote (network)Admin login neededNo user action

CVE-2026-33568

Critical9.1

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an…

OS command injectionRemote (network)Admin login neededNo user action

CVE-2026-40615

Critical9.1

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an…

Stack buffer overflowRemote (network)Admin login neededNo user action

CVE-2026-41222

Critical9.1

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an…

Stack buffer overflowRemote (network)Admin login neededNo user action

CVE-2026-101501

Critical9.9

Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise…

Remote (network)Login neededNo user action

CVE-2026-101503

Critical9.9

Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise…

Remote (network)Login neededNo user action

CVE-2026-101528

Critical9.9

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low…

Remote (network)Login neededNo user action

CVE-2026-101529

Critical9.9

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low…

Remote (network)Login neededNo user action

CVE-2026-9659

Critical9.1

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an…

Stack buffer overflowRemote (network)Admin login neededNo user action

CVE-2026-101446

Critical9.9

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network…

Remote (network)Login neededNo user action