Vulnerability in Oracle Communications Converged Application Server by Oracle
CVE-2026-61225

8.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle Communications Converged Application Server
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61225?

A vulnerability exists in the Oracle Communications Converged Application Server, specifically in versions 8.2 and 8.3. This vulnerability can be exploited by an unauthenticated attacker with network access via TCP/IP, potentially allowing them to take control of the server. Successful exploitation leads to significant impacts on confidentiality, integrity, and availability, making it crucial for users to address this issue promptly.

Affected Version(s)

Oracle Communications Converged Application Server 8.2

Oracle Communications Converged Application Server 8.3

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.