Live › vulnerability › CVE-2026-101452
Go to dashboardOracle Autonomous Health Framework's AHF Instant Diagnostic Replay component has a flaw that lets a low-privileged user who can log on to the host take it over. Successful exploitation gives the attacker full control of the framework, with high impact to confidentiality, integrity and availability.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Hosts that run Oracle Autonomous Health Framework in versions 26.3 through 26.8 and that let other users log on locally are exposed, since the attacker must already have a logon on the infrastructure. Systems where AHF is not installed, or where only trusted administrators can log on, carry much less risk.
No product ranges from the sources yet.
ahfctl version (unknown if the sources give the exact command)26.8 once Oracle publishes the fixed release (unknown: the sources do not name the fixed version)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay). Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. Successful attacks of this vulnerability can result in takeover of Oracle Autonomous Health Framework. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101452")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.