CVE-2026-34191

CVE-2026-34191 is an SQL injection vulnerability in the Apache Portable Runtime Utility via the apr_dbd_oracle provider. Affected versions are APR Utility 1.6.0 through 1.6.3. The connected documents confirm the vulnerability type and affected range but do not provide exploit details or remediati...

jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver

A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Oracle JDBC classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances...

The vulnerability of the Oracle ODBC driver of the Oracle Database Server allows a hacker to execute arbitrary code.

The vulnerability of the Oracle ODBC driver of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page or file...

jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver

A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Oracle JDBC classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances...