Unauthenticated Network Exploit in Oracle Database Server
CVE-2026-83351

8.1HIGH

Key Information:

Vendor

Oracle

Vendor
CVE Published:
15 September 2026

What is CVE-2026-83351?

A vulnerability has been identified in the Oracle Database Server's RDBMS component that permits an unauthenticated attacker with network access through Oracle Net to potentially compromise the RDBMS. Successful exploitation could lead to a full takeover of the RDBMS, posing significant risks to data confidentiality, integrity, and availability. The vulnerability is particularly concerning due to the possibility of an attacker utilizing it without needing any prior authentication.

Affected Version(s)

Oracle Database Server 23.4.0 <= 23.26.3

References

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.