{"id":"CVE-2026-101498","kind":"vulnerability","aliases":["CVE-2026-101498"],"related":[],"title":"Oracle Trusted Answer Search: PL/SQL flaw lets unauthenticated network attacker take over","description":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).   The supported version that is affected is 26.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search.  Successful attacks of this vulnerability can result in takeover of Oracle Trusted Answer Search. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).","summary":"Oracle Trusted Answer Search 26.1 has a flaw in its PL/SQL package that can be reached over Oracle Net. An unauthenticated attacker with network access can compromise the product and take it over, per the CVSS 8.1 score.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["oracle","oracle-trusted-answer-search","plsql","vendor"],"not_affected_if":["product-not-deployed"],"how_to_check":"- Check whether Oracle Trusted Answer Search version `26.1` is deployed\n- Confirm whether the Oracle Net listener is reachable from untrusted networks\n- unknown for other exposure checks: the sources do not say","fix":"- Apply the Oracle Critical Patch Update fix for Oracle Trusted Answer Search (the sources do not name the patched version)\n- Restrict Oracle Net listener access to trusted networks until patched","status":"open","published_at":"2026-10-20T22:17:58+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","triaged_at":"2026-10-25T03:06:26+00:00","updated_at":"2026-10-25T03:06:26+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T03:06:26Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Critical Patch Update fix for Oracle Trusted Answer Search (the sources do not name the patched version)\n- Restrict Oracle Net listener access to trusted networks until patched","reach":"network","title":"Oracle Trusted Answer Search: PL/SQL flaw lets unauthenticated network attacker take over","impact":"high","summary":"Oracle Trusted Answer Search 26.1 has a flaw in its PL/SQL package that can be reached over Oracle Net. An unauthenticated attacker with network access can compromise the product and take it over, per the CVSS 8.1 score.","category":"vendor","nicknames":[],"who_cares":["oracle","oracle-trusted-answer-search","plsql"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker takes over the product, reading and changing its data","analyst_note":"Confirm the patched version and advisory details from Oracle's Critical Patch Update notice; NVD is the only source given.","how_to_check":"- Check whether Oracle Trusted Answer Search version `26.1` is deployed\n- Confirm whether the Oracle Net listener is reachable from untrusted networks\n- unknown for other exposure checks: the sources do not say","needs_analyst":true,"not_affected_if":["product-not-deployed"],"who_is_affected":"Organizations running Oracle Trusted Answer Search 26.1 with the Oracle Net service reachable over the network. Systems that do not run this product, or that keep the database listener limited to internal trusted hosts, are less exposed. The sources do not state further configuration requirements.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000642,"input_tokens":3434,"output_tokens":597,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101498':14A,17A '-2026':13A,16A '/av':128C '26.1':30B,80C '3.1':115C,127C '8.1':62B,118C 'access':50B,90C 'affect':78C 'allow':85C 'answer':3A,22B,28B,68C,98C,112C 'attack':10A,47B,87C,101C 'avail':122C 'base':116C 'compon':70C 'compromis':52B,95C 'confidenti':119C 'cve':12A,15A 'cvss':61B,114C,124C,126C 'difficult':81C 'exploit':83C 'flaw':6A,33B 'h':136C 'h/a':135C 'h/i':134C 'h/pr':130C 'impact':123C 'integr':120C 'let':7A 'n/ac':129C 'n/s':132C 'n/ui':131C 'net':44B,93C 'network':9A,49B,89C 'oracl':1A,18B,20B,26B,43B,66C,92C,96C,110C 'oracle-trusted-answer-search':19B 'packag':37B,72C 'per':59B 'pl/sql':5A,36B 'plsql':24B,71C 'product':54B 'reach':41B 'result':106C 'score':63B,117C 'search':4A,23B,29B,69C,99C,113C 'success':100C 'support':74C 'take':11A,56B 'takeov':108C 'trust':2A,21B,27B,67C,97C,111C 'u/c':133C 'unauthent':8A,46B,86C 'vector':125C 'vendor':25B 'version':75C 'via':91C 'vulner':64C,84C,104C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle Trusted Answer Search 26.1 with the Oracle Net service reachable over the network. Systems that do not run this product, or that keep the database listener limited to internal trusted hosts, are less exposed. The sources do not state further configuration requirements.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101498","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101498","severity":null,"published_at":"2026-10-20T22:17:58+00:00","modified_at":"2026-10-21T14:29:49+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}