CoreCVE
Back

HIGH

Vulnerability in the RDBMS component of Oracle Database Server

Published Sep 15, 2026

Description

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in takeover of RDBMS. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner oracle
Published Sep 15, 2026
Updated Sep 17, 2026
Reserved Aug 31, 2026
Link CVE-2026-83160
CISA Vulnrichment
Updated Sep 17, 2026
NVD
Status Deferred
Modified Sep 17, 2026
Link CVE-2026-83160
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-83160