Live › vulnerability › CVE-2026-101600
Go to dashboardOracle TimesTen In-Memory Database has a flaw in its TimesTen IMDB component that lets a low-privileged user already logged on to the host read a subset of accessible data and modify some of it. The attack is hard to carry out and the CVSS score is 3.6 (low).
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Oracle TimesTen In-Memory Database in the affected version range 26.1 through 26.1.1.3.0. The attacker must already have a logon to the infrastructure where TimesTen runs, so hosts without untrusted local users are at lower risk; teams on other database versions can skip it.
No product ranges from the sources yet.
ttVersion run from the TimesTen installation bin directory (unknown if the sources do not say this command)26.1.1.3.0 to a patched release listed in Oracle's security advisory (unknown patched version in the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 26.1-26.1.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle TimesTen In-Memory Database executes to compromise Oracle TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle TimesTen In-Memory Database accessible data as well as unauthorized read access to a subset of Oracle TimesTen In-Memory Database accessible data. CVSS 3.1 Base Score 3.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101600")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.