Live › vulnerability › CVE-2026-101485
Go to dashboardOracle Autonomous Health Framework's Trace File Analyzer component has a flaw that lets a low-privileged user with logon to the host reach data they should not see. The CVSS vector scores it as high confidentiality impact with scope change, and no integrity or availability impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Oracle Autonomous Health Framework in the affected range to , where the Trace File Analyzer component is installed. The attacker needs a local logon on the same infrastructure, so hosts with no untrusted local users are at lower practical risk. Teams not running this Oracle product can skip it.
26.326.8No product ranges from the sources yet.
26.3 to 26.8 in the Oracle advisoryunknown to find the TFA install location if the sources do not say where it isEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. While the vulnerability is in Oracle Autonomous Health Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Autonomous Health Framework accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101485")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.