Live › vulnerability › CVE-2026-101481
Go to dashboardOracle Secure Backup 19.1.0.0.0 and 19.1.0.1.0 contain a flaw in Device Management and Support. A user with a low-privilege logon on the host running Oracle Secure Backup can take over the product and affect other systems in scope.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| Oracle Secure Backup | vendor | 19.1.0.0.0, 19.1.0.1.0 | – |
obtool --version on the admin host) or look at the installed OSB version19.1.0.0.0 and 19.1.0.1.0 are affectedDatabase on My Oracle Support (login needed)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101481")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.