CVE-2026-47040

CVE-2026-47040 describes a vulnerability in the Oracle Net Services component of Oracle Database Server. Affected are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An unauthenticated attacker with network access via Oracle Net can compromise Oracle Net Services, potentially leading to unauthorized ...

CVE-2026-61211

Oracle Database Server’s RDBMS component contains CVE-2026-61211 affecting 19.3–19.31 and 23.4.0–23.26.2. A low-privileged attacker with Execute DBMS_CLOUD and network access via Oracle Net can compromise the RDBMS, potentially taking over the system. Patching guidance is included in the Oracle J...

CVE-2026-47045

CVE-2026-47045 affects the JDBC component in Oracle Database Server. Affected supported versions are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a high-privileged attacker with network access via Oracle Net to compromise JDBC, requiring user interaction from a non-attacke...

CVE-2026-47061

CVE-2026-47061 affects the JDBC component of Oracle Database Server. Affects 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability, exploitable from an adjacent network, allows an unauthenticated attacker to compromise JDBC; exploitation is difficult and requires human interaction. Succes...

CVE-2026-47060

The CVE-2026-47060 vulnerability affects the JDBC component of Oracle Database Server. Affected versions include 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. It is exploitable over the network via Oracle Net and requires user interaction; successful attacks could lead to unauthorized creation, del...

CVE-2026-47038

CVE-2026-47038 affects Oracle Database Server’s RDBMS component. Supported vulnerable versions: 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An attacker with high privileges and network access via Oracle Net can exploit this to perform unauthorized updates/inserts/deletes on some RDBMS data. CVSS ...

CVE-2026-46975

Technical details about CVE-2026-46975 are not publicly available in the provided documents. Monitor the Oracle July 2026 CPU advisory for patched versions and exact vulnerable components.

CVE-2026-60175

CVE-2026-60175 affects Oracle Database Server RDBMS: vulnerable versions are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An attacker with Authenticated User privilege and network access via Oracle Net can exploit this low-privilege access to compromise the RDBMS and achieve takeover. CVSS 3.1 bas...

CVE-2026-47039

CVE-2026-47039 affects the Java VM component of Oracle Database Server. Affects Oracle Database Server Java VM in versions 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a low-privilege attacker with Create Session and network access via Oracle Net to compromise the Java VM,...