Unauthorized Access Vulnerability in Oracle VM VirtualBox by Oracle
CVE-2026-87273

8.6HIGH

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
15 September 2026

What is CVE-2026-87273?

A vulnerability exists in Oracle VM VirtualBox that permits unauthenticated attackers with access to the infrastructure to manipulate the application. The vulnerability, which is present in version 7.2.16, requires an external user interaction to exploit effectively. Although the attack targets Oracle VM VirtualBox, it can lead to broader implications for related products. Successful exploitation can result in a complete takeover of Oracle VM VirtualBox, compromising confidentiality, integrity, and availability of the environment.

Affected Version(s)

Oracle VM VirtualBox 7.2.16

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.