Oracle Database Server (October 2026 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the RDBMS OpenSSL component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and...

EUVD-2026-106787

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise RDBMS. While the vulnerability ...

EUVD-2026-106743

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMSVECTOR privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this...

EUVD-2026-106724

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the RDBMS executes to compromi...

EUVD-2026-106279

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS. Successful...

EUVD-2026-105926

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having None privilege with network access via HTTP to compromise RDBMS. Successful attacks of this vulnerability...

CVE-2026-91568

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise RDBMS. While the vulnerability ...

CVE-2026-91499

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMSVECTOR privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this...

CVE-2026-91479

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the RDBMS executes to compromi...

CVE-2026-73964

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS. Successful...

CVE-2026-101512

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having None privilege with network access via HTTP to compromise RDBMS. Successful attacks of this vulnerability...

CVE-2026-91568

A vulnerability exists in the RDBMS component of Oracle Database Server versions 23.4.0-23.26.3 . A low-privileged attacker with Create Session privileges and network access via Oracle Net can exploit this flaw to compromise the RDBMS. Successful exploitation may result in unauthorized access to ...

CVE-2026-91499

The RDBMS component of Oracle Database Server (affected versions 23.4.0-23.26.3 ) is vulnerable to a high-severity security flaw. A low-privileged attacker possessing DBMS_VECTOR privileges and network access via Oracle Net can exploit this vulnerability to compromise the RDBMS, potentially leadi...

CVE-2026-91479

A vulnerability exists in the RDBMS component of Oracle Database Server (affected versions 23.4.0-23.26.3 ). An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this flaw to compromise the RDBMS. Successful exploitation can lead to a ...

CVE-2026-73964

A vulnerability exists in the RDBMS component of Oracle Database Server (affected versions 19.3-19.32 and 21.3-21.23 ). A high-privileged attacker with Query Optimizer privileges and network access via Oracle Net can exploit this issue to compromise the RDBMS. Successful exploitation may lead to ...

CVE-2026-101512

A vulnerability exists in the RDBMS component of Oracle Database Server affecting versions 23.4.0-23.26.3 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the RDBMS. Successful exploitation may lead to unauthorized access to critical data or comp...

PT-2026-120064

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise RDBMS. While the vulnerability ...

PT-2026-119555

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS. Successful...

PT-2026-119198

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having None privilege with network access via HTTP to compromise RDBMS. Successful attacks of this vulnerability...

PT-2026-120020

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.3 Description A flaw exists in the RDBMS component of the Oracle Database Server. A low-privileged attacker with network access via Oracle Net and the DBMS VECTOR privilege can exploit this...