Vulnerability in Oracle REST Data Services Affecting Network Security

CVE-2026-35266

What is CVE-2026-35266?

A vulnerability exists in Oracle REST Data Services that allows an attacker with limited privileges and network access via HTTPS to exploit the system. Although difficult to exploit, successful attempts necessitate human interaction from a source other than the attacker. This vulnerability can lead to unauthorized actions such as creation, deletion, or modification of critical data, potentially impacting not just Oracle REST Data Services but also other connected systems. Moreover, attackers may exploit this flaw to induce partial denial of service, affecting the accessibility of the services.

References