SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-71100

MEDIUM · CVSS 5.3 EPSS 0.31% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability in the RDBMS component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3, allowing unauthenticated attackers with network access to compromise the database. Successful exploitation can lead to unauthorized read access to sensitive data, posing a confidentiality risk. Organizations using the affected Oracle Database versions should prioritize patching to mitigate potential data breaches.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-71100
Severity
MEDIUM
CVSS
5.3
EPSS
0.31%
Oracle

Original NVD Description

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of RDBMS accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Related CVEs

Other vulnerabilities affecting the same vendor(s)