Vulnerability in Oracle VM VirtualBox Core Component
CVE-2026-71131

8.6HIGH

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71131?

A vulnerability has been identified in the core component of Oracle VM VirtualBox, which affects version 7.2.14. This flaw allows an unauthenticated attacker with access to the same infrastructure where Oracle VM VirtualBox operates to exploit the vulnerability. The attack requires human interaction from an individual other than the attacker, facilitating a potential compromise of the VirtualBox environment. If successfully exploited, this vulnerability can lead to the takeover of Oracle VM VirtualBox, impacting confidentiality, integrity, and availability across the virtualized infrastructure.

Affected Version(s)

Oracle VM VirtualBox 7.2.14

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.