Vulnerability in Oracle Communications Converged Application Server (RTP Proxy)
CVE-2026-61226

7.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle Communications Converged Application Server
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61226?

The vulnerability in the Oracle Communications Converged Application Server's RTP Proxy component allows an attacker with high privileges to compromise the server. Although primarily affecting the server itself, the implications of exploitation can extend to other interconnected products, potentially leading to unauthorized access and control. This risk underscores the necessity for users to implement immediate security measures to safeguard their infrastructure.

Affected Version(s)

Oracle Communications Converged Application Server 8.3

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.