Vulnerability in Oracle Application Testing Suite Allows Compromise

CVE-2026-70866

What is CVE-2026-70866?

A vulnerability exists in Oracle Application Testing Suite that allows a low-privilege attacker with Load Testing for Web Apps rights to access the environment where the suite operates. This flaw facilitates unauthorized control over the application, potentially leading to severe security breaches. Exploitation is simplified, as it requires minimal access privileges, making it critical for users to apply necessary updates and security measures promptly to mitigate risks associated with unauthorized access and potential data compromise.

References