{"id":"CVE-2026-101480","kind":"vulnerability","aliases":["CVE-2026-101480"],"related":[],"title":"Oracle Secure Backup: NDMP daemon flaw leaks some backup data to network attackers","description":"Vulnerability in Oracle Secure Backup (component: NDMP daemon).  Supported versions that are affected are 19.1.0.0.0 and   19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Secure Backup accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","summary":"The NDMP daemon in Oracle Secure Backup 19.1.0.0.0 and 19.1.0.1.0 has a flaw that lets an unauthenticated attacker reach it over TCP. A successful attack gives read access to a subset of data the backup server can access.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup-servers","ndmp","oracle-secure-backup","vendor"],"not_affected_if":["ndmp-not-network-reachable","other-versions"],"how_to_check":"- Check the installed Oracle Secure Backup version against `19.1.0.0.0` and `19.1.0.1.0`\n- Confirm whether the NDMP daemon is reachable over TCP from untrusted networks: unknown","fix":"- Move Oracle Secure Backup off `19.1.0.0.0` and `19.1.0.1.0` to a patched release named in Oracle's advisory: unknown\n- Restrict network access to the NDMP port to backup clients only","status":"open","published_at":"2026-10-20T22:17:57+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","triaged_at":"2026-10-25T04:24:26+00:00","updated_at":"2026-10-25T04:24:26+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T04:24:26Z","model":"claude-haiku-5-5","output":{"fix":"- Move Oracle Secure Backup off `19.1.0.0.0` and `19.1.0.1.0` to a patched release named in Oracle's advisory: unknown\n- Restrict network access to the NDMP port to backup clients only","reach":"network","title":"Oracle Secure Backup: NDMP daemon flaw leaks some backup data to network attackers","impact":"low","summary":"The NDMP daemon in Oracle Secure Backup 19.1.0.0.0 and 19.1.0.1.0 has a flaw that lets an unauthenticated attacker reach it over TCP. A successful attack gives read access to a subset of data the backup server can access.","category":"vendor","nicknames":[],"who_cares":["oracle-secure-backup","backup-servers","ndmp"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker reads a subset of backup-accessible data over the network","analyst_note":"Check Oracle's Critical Patch Update advisory for the patched release and whether the NDMP daemon is enabled by default.","how_to_check":"- Check the installed Oracle Secure Backup version against `19.1.0.0.0` and `19.1.0.1.0`\n- Confirm whether the NDMP daemon is reachable over TCP from untrusted networks: unknown","needs_analyst":true,"not_affected_if":["other-versions","ndmp-not-network-reachable"],"who_is_affected":"Deployments of Oracle Secure Backup 19.1.0.0.0 and 19.1.0.1.0 where the NDMP daemon accepts TCP connections from the network are exposed. Sites on other versions, or with NDMP blocked from untrusted networks, are less exposed; the sources do not say more.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000663,"input_tokens":3444,"output_tokens":638,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101480':16A,19A '-2026':15A,18A '/av':131C '19.1.0.0.0':36B,81C '19.1.0.1.0':38B,83C '3.1':121C,130C '5.3':124C 'access':56B,66B,92C,110C,118C 'affect':79C 'allow':87C 'attack':13A,46B,53B,89C,101C 'backup':3A,9A,21B,27B,35B,63B,71C,99C,117C 'backup-serv':20B 'base':122C 'compon':72C 'compromis':96C 'confidenti':125C 'cve':14A,17A 'cvss':120C,127C,129C 'daemon':5A,31B,74C 'data':10A,61B,119C 'easili':84C 'exploit':85C 'flaw':6A,41B 'give':54B 'impact':126C 'l/i':137C 'l/pr':133C 'leak':7A 'let':43B 'n':139C 'n/a':138C 'n/ac':132C 'n/s':135C 'n/ui':134C 'ndmp':4A,23B,30B,73C 'network':12A,91C 'oracl':1A,25B,33B,69C,97C,115C 'oracle-secure-backup':24B 'reach':47B 'read':55B,109C 'result':106C 'score':123C 'secur':2A,26B,34B,70C,98C,116C 'server':22B,64B 'subset':59B,113C 'success':52B,100C 'support':75C 'tcp':50B,94C 'u/c':136C 'unauthent':45B,88C 'unauthor':108C 'vector':128C 'vendor':28B 'version':76C 'via':93C 'vulner':67C,86C,104C","nicknames":[],"mitigations":[],"who_affected":"Deployments of Oracle Secure Backup 19.1.0.0.0 and 19.1.0.1.0 where the NDMP daemon accepts TCP connections from the network are exposed. Sites on other versions, or with NDMP blocked from untrusted networks, are less exposed; the sources do not say more.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:57+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101480","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101480","severity":null,"published_at":"2026-10-20T22:17:57+00:00","modified_at":"2026-10-21T14:29:49+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}