Live › vulnerability › CVE-2026-101510
Go to dashboardOracle Net Services, the networking layer of Oracle Database Server, can be made to hang or repeatedly crash by a highly privileged local user. The impact is denial of service only, with no confidentiality or integrity loss stated.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Oracle Database Server in the affected version ranges where users with logon access to the host where Oracle Net Services runs could abuse it. Attacker must already hold high privileges on the infrastructure, so exposure is limited to shared or multi-tenant hosts. Databases on fully patched or non-affected versions can skip this.
No product ranges from the sources yet.
SELECT * FROM v$version; and compare against the affected ranges 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows high privileged attacker having None privilege with logon to the infrastructure where Oracle Net Services executes to compromise Oracle Net Services. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101510")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.