Live › vulnerability › CVE-2026-101480
Go to dashboardThe NDMP daemon in Oracle Secure Backup 19.1.0.0.0 and 19.1.0.1.0 has a flaw that lets an unauthenticated attacker reach it over TCP. A successful attack gives read access to a subset of data the backup server can access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Deployments of Oracle Secure Backup 19.1.0.0.0 and 19.1.0.1.0 where the NDMP daemon accepts TCP connections from the network are exposed. Sites on other versions, or with NDMP blocked from untrusted networks, are less exposed; the sources do not say more.
No product ranges from the sources yet.
19.1.0.0.0 and 19.1.0.1.019.1.0.0.0 and 19.1.0.1.0 to a patched release named in Oracle's advisory: unknownEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in Oracle Secure Backup (component: NDMP daemon). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Secure Backup accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101480")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.