Live › vulnerability › CVE-2026-91517
Go to dashboardThe Oracle Management Pack for Oracle GoldenGate, specifically its EM Plugin component, contains a flaw affecting versions 13.4.1.0.1 through 13.5.2.0.6. An attacker on the physical or adjacent network segment without credentials can take over the product when a person other than the attacker interacts with it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle Management Pack for Oracle GoldenGate versions 13.4.1.0.1 through 13.5.2.0.6 with the EM Plugin component, on hosts reachable from an adjacent network segment. Sources do not say which deployment layouts are most exposed, so unknown whether internet-facing setups matter; teams not running this product can skip it.
No product ranges from the sources yet.
13.4.1.0.1 through 13.5.2.0.613.5.2.0.6 per Oracle's Critical Patch Update advisoryEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin). Supported versions that are affected are 13.4.1.0.1-13.5.2.0.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Management Pack for Oracle GoldenGate executes to compromise Oracle Management Pack for Oracle GoldenGate. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Management Pack for Oracle GoldenGate. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91517")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.