---
id: "CVE-2026-73964"
kind: "vulnerability"
aliases: ["CVE-2026-73964"]
title: "Oracle Database Server: high-privilege Query Optimizer flaw leaks some stored data"
severity: "low"
cvss: 2.7
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["database", "oracle-database", "package", "self-hosted"]
not_affected_if: ["auth-required", "default-config"]
published_at: "2026-10-20T22:19:49+00:00"
first_seen_at: "2026-10-23T21:57:25+00:00"
updated_at: "2026-10-25T04:48:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73964", "first_seen_at": "2026-10-23T21:57:25+00:00"}]
---

# Oracle Database Server: high-privilege Query Optimizer flaw leaks some stored data

A flaw in the RDBMS component of Oracle Database Server lets a high-privileged user with Query Optimizer rights read a subset of data they should not reach. The attacker must already hold a privileged account and reach the database over Oracle Net.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `SELECT banner FROM v$version;` and compare against the affected releases 19.3 through 19.32 and 21.3 through 21.23
- Confirm whether the Oracle Net listener is reachable from untrusted networks
- Review which accounts hold the Query Optimizer privilege

## Fix

- Apply the Oracle Critical Patch Update that covers this CVE for your release (exact patch number unknown from sources)
- Restrict Oracle Net listener access to trusted hosts

## Timeline

- 2026-10-23T21:57:25+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-73964

## From the sources

Vulnerability in the RDBMS component of Oracle Database Server.  Supported versions that are affected are 19.3-19.32 and  21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of RDBMS accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_