Axiom Cyber Research

08/28/2026

CRITICAL Alert: CVE-2026-22306 — CVSS 10.0

Critical Vulnerability in Ozols Grupa OZOLS (CVE-2026-22306)

Full advisory with patch guidance: https://247alerts.net/alerts/cve2026-22306-critical-vulnerability-in-ozols-grupa-ozols-cve-2026-22306

Follow Axiom Cyber Research for daily threat intel.

08/28/2026

🚨 Critical Vulnerability Alert — CVE-2026-35280 (CVSS 9.9)

Critical Vulnerability in Oracle WebCenter Enterprise Capture (CVE-2026-35280)

A critical vulnerability (CVE-2026-35280) allows low-privileged attackers to take over Oracle WebCenter Enterprise Capture via network access. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 of Oracle Fusion Middleware platforms.

Full advisory: https://247alerts.net/alerts/cve2026-35280-critical-vulnerability-in-oracle-webcenter-enterprise-captur

Free threat intel from axiomcyber.io at 247alerts.net.

A critical vulnerability (CVE-2026-35280) allows low-privileged attackers to take over Oracle WebCenter Enterprise Capture via network access. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 of Or

08/28/2026

🚨 Critical Vulnerability Alert — CVE-2026-35313 (CVSS 9.9)

Critical Vulnerability in Oracle Access Manager (CVE-2026-35313)

A critical vulnerability in Oracle Access Manager allows low-privileged attackers to take over the system via HTTP. Affected versions include 12.2.1.4.0 and 14.1.2.1.0. CVSS score 9.9, requiring immediate mitigation.

Full advisory: https://247alerts.net/alerts/cve2026-35313-critical-vulnerability-in-oracle-access-manager-cve-2026-353

Free threat intel from axiomcyber.io at 247alerts.net.

A critical vulnerability in Oracle Access Manager allows low-privileged attackers to take over the system via HTTP. Affected versions include 12.2.1.4.0 and 14.1.2.1.0. CVSS score 9.9, requiring immed

08/28/2026

🚨 Critical Vulnerability Alert — CVE-2026-81096 (CVSS 10.0)

Critical Vulnerability in ToolUniverse Allows Remote Code Ex*****on (CVE-2026-81096)

A critical vulnerability in ToolUniverse's python_executor_tool allows unauthenticated remote code ex*****on. Attackers can exploit this to execute arbitrary code on the server, posing a severe security risk.

Full advisory: https://247alerts.net/alerts/cve2026-81096-critical-vulnerability-in-tooluniverse-allows-remote-code-ex

Free threat intel from axiomcyber.io at 247alerts.net.

A critical vulnerability in ToolUniverse's python_executor_tool allows unauthenticated remote code ex*****on. Attackers can exploit this to execute arbitrary code on the server, posing a severe securi

08/28/2026

🚨 Critical Vulnerability Alert — CVE-2026-81735 (CVSS 10.0)

Critical Vulnerability in MCP HTTP Server Allows Unauthenticated Access (CVE-2026-81735)

A critical vulnerability in multiple UI-TARS components allows unauthenticated access to sensitive functions. Affected software includes mcp-http-server, ui-tars-desktop, and related libraries. Immediate patching is required to prevent exploitation.

Full advisory: https://247alerts.net/alerts/cve2026-81735-critical-vulnerability-in-mcp-http-server-allows-unauthentic

Free threat intel from axiomcyber.io at 247alerts.net.

A critical vulnerability in multiple UI-TARS components allows unauthenticated access to sensitive functions. Affected software includes mcp-http-server, ui-tars-desktop, and related libraries. Immedi

08/28/2026

🚨 Critical Vulnerability Alert — CVE-2026-22306 (CVSS 10.0)

Critical Vulnerability in Ozols Grupa OZOLS (CVE-2026-22306)

A critical vulnerability (CVE-2026-22306) allows attackers to execute arbitrary code via untrusted updates in Ozols Grupa OZOLS, affecting versions before 1.1.1233. CVSS score: 10.0.

Full advisory: https://247alerts.net/alerts/cve2026-22306-critical-vulnerability-in-ozols-grupa-ozols-cve-2026-22306

Free threat intel from axiomcyber.io at 247alerts.net.

A critical vulnerability (CVE-2026-22306) allows attackers to execute arbitrary code via untrusted updates in Ozols Grupa OZOLS, affecting versions before 1.1.1233. CVSS score: 10.0.

08/26/2026

My new favorite linkedin post: 11 minutes ==> 51+ directly exposed AI endpoints.

08/26/2026

CRITICAL Alert: CVE-2026-46779 — CVSS 9.9

Critical Remote Code Ex*****on Vulnerability in Oracle WebCenter Enterprise Capture (CVE-2026-46779)

Full advisory with patch guidance: https://247alerts.net/alerts/cve2026-46779-critical-remote-code-ex*****on-vulnerability-in-oracle-webce

Follow Axiom Cyber Research for daily threat intel.

08/26/2026

🚨 Critical Vulnerability Alert — CVE-2026-35283 (CVSS 9.9)

Critical Vulnerability in Oracle WebCenter Enterprise Capture (CVE-2026-35283)

A critical vulnerability (CVE-2026-35283) allows low-privileged attackers to take over Oracle WebCenter Enterprise Capture via network access. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 of the Oracle Fusion Middleware platform.

Full advisory: https://247alerts.net/alerts/cve2026-35283-critical-vulnerability-in-oracle-webcenter-enterprise-captur

247alerts.net — free CVE review for every security team.

A critical vulnerability (CVE-2026-35283) allows low-privileged attackers to take over Oracle WebCenter Enterprise Capture via network access. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 of th

08/26/2026

🚨 Critical Vulnerability Alert — CVE-2026-35285 (CVSS 9.9)

Critical Vulnerability in Oracle WebCenter Enterprise Capture (CVE-2026-35285)

A critical vulnerability (CVE-2026-35285) allows low-privileged attackers to take over Oracle WebCenter Enterprise Capture via network access. Affected versions include 12.2.1.4.0 and 14.1.2.0.0. CVSS score: 9.9.

Full advisory: https://247alerts.net/alerts/cve2026-35285-critical-vulnerability-in-oracle-webcenter-enterprise-captur

247alerts.net — free CVE review for every security team.

A critical vulnerability (CVE-2026-35285) allows low-privileged attackers to take over Oracle WebCenter Enterprise Capture via network access. Affected versions include 12.2.1.4.0 and 14.1.2.0.0. CVSS