---
id: "CVE-2026-101483"
kind: "vulnerability"
aliases: ["CVE-2026-101483"]
title: "Oracle Secure Backup: low-privileged local user can crash backup service"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["backup-servers", "infrastructure", "linux", "oracle-secure-backup", "windows"]
not_affected_if: ["no-local-logon", "other-versions"]
published_at: "2026-10-20T22:17:57+00:00"
first_seen_at: "2026-10-23T21:57:22+00:00"
updated_at: "2026-10-25T03:55:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101483", "first_seen_at": "2026-10-23T21:57:22+00:00"}]
---

# Oracle Secure Backup: low-privileged local user can crash backup service

Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 contain a flaw in the Device Management and Support component. A low-privileged user with logon to the host can cause a repeatable hang or crash, denying service to the backup product and possibly affecting other products on the same infrastructure.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Oracle Secure Backup version on backup servers and clients, for example with `obtool version` (unknown if this command is correct for your install)
- Confirm whether the Device Management and Support component is in use on the host

## Fix

- Move Oracle Secure Backup off `19.1.0.0.0` and `19.1.0.1.0` to a patched release listed in Oracle's July or later Critical Patch Update advisory (exact fixed version: unknown)
- Restrict interactive logon to backup hosts to trusted administrators until patched

## Timeline

- 2026-10-23T21:57:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101483

## From the sources

Vulnerability in Oracle Secure Backup (component: Device Management and Support).  Supported versions that are affected are 19.1.0.0.0 and   19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup.  While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Secure Backup. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_