Live › vulnerability › CVE-2026-101483
Go to dashboardOracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 contain a flaw in the Device Management and Support component. A low-privileged user with logon to the host can cause a repeatable hang or crash, denying service to the backup product and possibly affecting other products on the same infrastructure.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Hosts running Oracle Secure Backup 19.1.0.0.0 or 19.1.0.1.0 where local users can log on. The attacker needs a local account on the machine running the software, not network access. Installations on locked-down backup hosts with no shared logon are at lower risk.
No product ranges from the sources yet.
obtool version (unknown if this command is correct for your install)19.1.0.0.0 and 19.1.0.1.0 to a patched release listed in Oracle's July or later Critical Patch Update advisory (exact fixed version: unknown)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Secure Backup. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101483")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.