---
id: "CVE-2026-101480"
kind: "vulnerability"
aliases: ["CVE-2026-101480"]
title: "Oracle Secure Backup: NDMP daemon flaw leaks some backup data to network attackers"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["backup-servers", "ndmp", "oracle-secure-backup", "vendor"]
not_affected_if: ["ndmp-not-network-reachable", "other-versions"]
published_at: "2026-10-20T22:17:57+00:00"
first_seen_at: "2026-10-23T21:57:22+00:00"
updated_at: "2026-10-25T04:24:26+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101480", "first_seen_at": "2026-10-23T21:57:22+00:00"}]
---

# Oracle Secure Backup: NDMP daemon flaw leaks some backup data to network attackers

The NDMP daemon in Oracle Secure Backup 19.1.0.0.0 and 19.1.0.1.0 has a flaw that lets an unauthenticated attacker reach it over TCP. A successful attack gives read access to a subset of data the backup server can access.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Oracle Secure Backup version against `19.1.0.0.0` and `19.1.0.1.0`
- Confirm whether the NDMP daemon is reachable over TCP from untrusted networks: unknown

## Fix

- Move Oracle Secure Backup off `19.1.0.0.0` and `19.1.0.1.0` to a patched release named in Oracle's advisory: unknown
- Restrict network access to the NDMP port to backup clients only

## Timeline

- 2026-10-23T21:57:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101480

## From the sources

Vulnerability in Oracle Secure Backup (component: NDMP daemon).  Supported versions that are affected are 19.1.0.0.0 and   19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Secure Backup accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_