CVE-2026-71063

Oracle Portable Clusterware (Database Server versions 19.3–19.32, 21.3–21.23, 23.4.0–23.26.3) has a critical (CVSS 9.6) flaw allowing unauthenticated attackers on the adjacent physical segment to take over Clusterware and affect other products. Oracle's August 2026 CPU (cspuaug2026.html) is the p...

CVE-2026-71100

CVE-2026-71100 affects Oracle Database Server's RDBMS component across versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with network access via Oracle Net can exploit it to read a subset of database data. CVSS 3.1 score is 5.3 (MEDIUM). Oracle's August 2026 CPU adv...

CVE-2026-71064

A critical (CVSS 9.6) unauthenticated vulnerability in Oracle Database Server's Portable Clusterware component affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An attacker on the adjacent network segment can take over Portable Clusterware with scope change impacting other products. No...

CVE-2026-71102

Oracle Database Server Portable Clusterware is affected in versions 19.3–19.32, 21.3–21.23, and 23.4.0–23.26.3. An unauthenticated remote attacker can exploit it via HTTP to gain unauthorized data modification/creation/deletion and cause a complete denial of service (hang or crash). CVSS 3.1 scor...