Live › vulnerability › CVE-2026-101517
Go to dashboardOracle Utilities Network Management System (System Wide component) has a flaw in several supported release lines, including 2.4.0.1.0 through 2.6.0.2.9 and 25.12.0.0.0 through 25.12.0.0.2. A low-privileged user who can log on to the host running the product can gain unauthorized access to critical data, per the CVSS 5.5 vector (confidentiality high, no integrity or availability impact).
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running Oracle Utilities Network Management System in one of the affected release lines are exposed. Because the attacker must already be able to log on to the infrastructure where the product runs, the risk sits with shared or multi-user hosts; a system where only a few administrators have shell access is less exposed. Sites on releases outside the listed ranges can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.18, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.9 and 25.12.0.0.0-25.12.0.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Utilities Network Management System executes to compromise Oracle Utilities Network Management System. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Utilities Network Management System accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101517")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.