Live › vulnerability › CVE-2026-101498
Go to dashboardOracle Trusted Answer Search 26.1 has a flaw in its PL/SQL package that can be reached over Oracle Net. An unauthenticated attacker with network access can compromise the product and take it over, per the CVSS 8.1 score.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Trusted Answer Search 26.1 with the Oracle Net service reachable over the network. Systems that do not run this product, or that keep the database listener limited to internal trusted hosts, are less exposed. The sources do not state further configuration requirements.
No product ranges from the sources yet.
26.1 is deployedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. Successful attacks of this vulnerability can result in takeover of Oracle Trusted Answer Search. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101498")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.