{"id":"CVE-2026-101483","kind":"vulnerability","aliases":["CVE-2026-101483"],"related":[],"title":"Oracle Secure Backup: low-privileged local user can crash backup service","description":"Vulnerability in Oracle Secure Backup (component: Device Management and Support).  Supported versions that are affected are 19.1.0.0.0 and   19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup.  While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Secure Backup. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).","summary":"Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 contain a flaw in the Device Management and Support component. A low-privileged user with logon to the host can cause a repeatable hang or crash, denying service to the backup product and possibly affecting other products on the same infrastructure.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup-servers","infrastructure","linux","oracle-secure-backup","windows"],"not_affected_if":["no-local-logon","other-versions"],"how_to_check":"- Check the installed Oracle Secure Backup version on backup servers and clients, for example with `obtool version` (unknown if this command is correct for your install)\n- Confirm whether the Device Management and Support component is in use on the host","fix":"- Move Oracle Secure Backup off `19.1.0.0.0` and `19.1.0.1.0` to a patched release listed in Oracle's July or later Critical Patch Update advisory (exact fixed version: unknown)\n- Restrict interactive logon to backup hosts to trusted administrators until patched","status":"open","published_at":"2026-10-20T22:17:57+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","triaged_at":"2026-10-25T03:55:27+00:00","updated_at":"2026-10-25T03:55:27+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T03:55:27Z","model":"claude-haiku-5-5","output":{"fix":"- Move Oracle Secure Backup off `19.1.0.0.0` and `19.1.0.1.0` to a patched release listed in Oracle's July or later Critical Patch Update advisory (exact fixed version: unknown)\n- Restrict interactive logon to backup hosts to trusted administrators until patched","reach":"local","title":"Oracle Secure Backup: low-privileged local user can crash backup service","impact":"medium","summary":"Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 contain a flaw in the Device Management and Support component. A low-privileged user with logon to the host can cause a repeatable hang or crash, denying service to the backup product and possibly affecting other products on the same infrastructure.","category":"infrastructure","nicknames":[],"who_cares":["oracle-secure-backup","backup-servers","linux","windows"],"confidence":0.6,"needs_auth":"yes","worst_case":"Backup service hangs or repeatedly crashes, denying backups; other products on host may be impacted","analyst_note":"Confirm the patched version and the exact check command in Oracle's CPU advisory for this CVE; sources only give the affected versions and CVSS vector.","how_to_check":"- Check the installed Oracle Secure Backup version on backup servers and clients, for example with `obtool version` (unknown if this command is correct for your install)\n- Confirm whether the Device Management and Support component is in use on the host","needs_analyst":true,"not_affected_if":["other-versions","no-local-logon"],"who_is_affected":"Hosts running Oracle Secure Backup 19.1.0.0.0 or 19.1.0.1.0 where local users can log on. The attacker needs a local account on the machine running the software, not network access. Installations on locked-down backup hosts with no shared logon are at lower risk.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000688,"input_tokens":3507,"output_tokens":674,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101483':15A,18A '-2026':14A,17A '/av':170C '19.1.0.0.0':33B,94C '19.1.0.1.0':35B,96C '3.1':160C,169C '6.5':163C 'abil':144C 'addit':131C 'affect':71B,92C 'allow':100C 'attack':103C,127C,136C 'avail':164C 'backup':3A,11A,20B,27B,31B,67B,82C,112C,118C,126C,158C 'backup-serv':19B 'base':161C 'c/c':175C 'caus':57B,146C 'chang':134C 'complet':153C 'compon':45B,83C 'compromis':115C 'contain':36B 'crash':10A,62B,152C 'cve':13A,16A 'cvss':159C,166C,168C 'deni':63B 'devic':41B,84C 'dos':154C 'easili':97C 'execut':113C 'exploit':98C 'flaw':38B 'frequent':150C 'h':178C 'hang':60B,148C 'host':55B 'impact':130C,165C 'infrastructur':22B,77B,108C 'l/ac':171C 'l/pr':172C 'l/ui':173C 'linux':23B 'local':7A 'logon':52B,105C 'low':5A,48B,101C 'low-privileg':4A,47B 'manag':42B,85C 'may':128C 'n/a':177C 'n/i':176C 'n/s':174C 'oracl':1A,25B,29B,80C,110C,116C,124C,156C 'oracle-secure-backup':24B 'possibl':70B 'privileg':6A,49B,102C 'product':68B,73B,132C 'repeat':59B,151C 'result':141C 'scope':133C 'score':162C 'secur':2A,26B,30B,81C,111C,117C,125C,157C 'server':21B 'servic':12A,64B 'signific':129C 'success':135C 'support':44B,87C,88C 'unauthor':143C 'user':8A,50B 'vector':167C 'version':32B,89C 'vulner':78C,99C,121C,139C 'window':28B","nicknames":[],"mitigations":[],"who_affected":"Hosts running Oracle Secure Backup 19.1.0.0.0 or 19.1.0.1.0 where local users can log on. The attacker needs a local account on the machine running the software, not network access. Installations on locked-down backup hosts with no shared logon are at lower risk.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:57+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101483","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101483","severity":null,"published_at":"2026-10-20T22:17:57+00:00","modified_at":"2026-10-21T14:29:49+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}