Exploitable Vulnerability in TimesTen In-Memory Database by Oracle
CVE-2026-60405

3.8LOW

Key Information:

Vendor

Oracle
Status
Timesten In-memory Database
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60405?

A security flaw in Oracle's TimesTen In-Memory Database allows a low privileged attacker with access to the infrastructure where the database operates to exploit the vulnerability. This could lead to unauthorized read access to sensitive data stored within the database. The vulnerability, connected to its Kubernetes Operator component, underscores the need for enhanced security measures, as the ramifications of successful exploitation may extend to other associated products.

Affected Version(s)

TimesTen In-Memory Database 26.1.1.1.0

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
3.8
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.