Vulnerability in RDBMS Component of Oracle Database Server
CVE-2026-71062

8.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle Database Server
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71062?

A security weakness has been identified in the RDBMS component of Oracle Database Server, affecting versions between 23.4.0 and 23.26.3. An attacker with low privileges can exploit this vulnerability remotely if they possess an Authenticated User privilege and have network access through Oracle Net. Although it specifically targets the RDBMS, successful exploitation could impact other interconnected systems significantly, making it crucial for organizations to address this issue promptly to safeguard their data and operations. Immediate action is recommended to prevent unauthorized access and potential takeover of the RDBMS.

Affected Version(s)

Oracle Database Server 23.4.0 <= 23.26.3

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.