CERT24Key vulnerabilities in week 22 of 2026: Oracle, Microsoft, IBM and othersLoading data…
CERT24Threat Observatory
Period

Key vulnerabilities in week 22 of 2026: Oracle, Microsoft, IBM and others

RIA’s overview covers vulnerabilities in products from several vendors. Among the most critical are the unauthenticated Oracle REST Data Services vulnerability CVE-2026-46840 (CVSS 10.0/10), the Microsoft SharePoint Server remote-code-execution vulnerability CVE-2026-45659 (CVSS 8.8/10), and several other high-impact vulnerabilities. Palo Alto Networks reported that the PAN-OS GlobalProtect portal vulnerability CVE-2026-0257 (CVSS 9.8/10) is being actively exploited in attacks.

← Back to intelligence

Key vulnerabilities in week 22 of 2026: Oracle, Microsoft, IBM and others

RIA’s overview covers vulnerabilities in products from several vendors. Among the most critical are the unauthenticated Oracle REST Data Services vulnerability CVE-2026-46840 (CVSS 10.0/10), the Microsoft SharePoint Server remote-code-execution vulnerability CVE-2026-45659 (CVSS 8.8/10), and several other high-impact vulnerabilities. Palo Alto Networks reported that the PAN-OS GlobalProtect portal vulnerability CVE-2026-0257 (CVSS 9.8/10) is being actively exploited in attacks.