Data Manipulation Vulnerability in Oracle Mobile Application Server by Oracle
CVE-2026-101829

7.4HIGH

Key Information:

Vendor

Oracle
Status
Oracle Mobile Application Server
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101829?

A vulnerability in Oracle Mobile Application Server allows unauthenticated attackers with network access via HTTP to compromise the server. This flaw enables unauthorized creation, deletion, or modification of critical data in Oracle Mobile Application Server. Attackers could gain complete access to sensitive data, significantly impacting the confidentiality and integrity of the data managed by the server.

Affected Version(s)

Oracle Mobile Application Server 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.