{"id":"CVE-2026-91517","kind":"vulnerability","aliases":["CVE-2026-91517"],"related":[],"title":"Oracle GoldenGate Management Pack EM Plugin: unauthenticated takeover from adjacent network","description":"Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin).  Supported versions that are affected are 13.4.1.0.1-13.5.2.0.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Management Pack for Oracle GoldenGate executes to compromise Oracle Management Pack for Oracle GoldenGate.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Management Pack for Oracle GoldenGate. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).","summary":"The Oracle Management Pack for Oracle GoldenGate, specifically its EM Plugin component, contains a flaw affecting versions 13.4.1.0.1 through 13.5.2.0.6. An attacker on the physical or adjacent network segment without credentials can take over the product when a person other than the attacker interacts with it.","severity":"high","cvss":8.0,"epss":0.00184,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["oracle-enterprise-manager","oracle-goldengate","other","self-hosted"],"not_affected_if":["product-not-installed","version-outside-range"],"how_to_check":"- Check the installed Management Pack for Oracle GoldenGate version against `13.4.1.0.1` through `13.5.2.0.6`\n- unknown","fix":"- Move the Oracle Management Pack for Oracle GoldenGate to a version newer than `13.5.2.0.6` per Oracle's Critical Patch Update advisory\n- unknown","status":"open","published_at":"2026-10-20T22:20:55+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T03:07:55+00:00","updated_at":"2026-10-25T12:38:51+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-25T03:07:55Z","model":"claude-haiku-5-5","output":{"fix":"- Move the Oracle Management Pack for Oracle GoldenGate to a version newer than `13.5.2.0.6` per Oracle's Critical Patch Update advisory\n- unknown","reach":"network","title":"Oracle GoldenGate Management Pack EM Plugin: unauthenticated takeover from adjacent network","impact":"high","summary":"The Oracle Management Pack for Oracle GoldenGate, specifically its EM Plugin component, contains a flaw affecting versions 13.4.1.0.1 through 13.5.2.0.6. An attacker on the physical or adjacent network segment without credentials can take over the product when a person other than the attacker interacts with it.","category":"other","nicknames":[],"who_cares":["oracle-goldengate","oracle-enterprise-manager","self-hosted"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker takes over the management pack, reading and changing its data","analyst_note":"Confirm the EM Plugin component scope and the patched version from Oracle's CPU advisory; the NVD entry gives no fix version.","how_to_check":"- Check the installed Management Pack for Oracle GoldenGate version against `13.4.1.0.1` through `13.5.2.0.6`\n- unknown","needs_analyst":true,"not_affected_if":["product-not-installed","version-outside-range"],"who_is_affected":"Teams running Oracle Management Pack for Oracle GoldenGate versions 13.4.1.0.1 through 13.5.2.0.6 with the EM Plugin component, on hosts reachable from an adjacent network segment. Sources do not say which deployment layouts are most exposed, so unknown whether internet-facing setups matter; teams not running this product can skip it.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000678,"input_tokens":3556,"output_tokens":645,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-91517':14A,17A '/av':173C '13.4.1.0.1':46B,95C '13.5.2.0.6':48B,96C '3.1':160C,172C '8.0':163C 'a/ac':174C 'access':104C 'adjac':10A,55B 'affect':44B,93C 'allow':100C 'attach':110C 'attack':50B,71B,102C,132C,142C,144C 'avail':167C 'base':161C 'communic':108C 'compon':40B,86C 'compromis':124C 'confidenti':164C 'contain':41B 'credenti':59B 'cve':12A,15A 'cvss':159C,169C,171C 'easili':97C 'em':5A,38B,87C 'enterpris':20B 'execut':122C 'exploit':98C 'flaw':43B 'goldeng':2A,24B,35B,81C,85C,121C,130C,158C 'h':181C 'h/a':180C 'h/i':179C 'hardwar':113C 'host':28B 'human':134C 'impact':168C 'integr':165C 'interact':72B,135C 'l/pr':175C 'manag':3A,21B,31B,77C,117C,126C,154C 'n/ui':176C 'network':11A,56B 'oracl':1A,19B,23B,30B,34B,76C,80C,84C,116C,120C,125C,129C,153C,157C 'oracle-enterprise-manag':18B 'oracle-goldeng':22B 'pack':4A,32B,78C,118C,127C,155C 'person':67B,138C 'physic':53B,107C 'plugin':6A,39B,88C 'product':64B,82C 'r/s':177C 'requir':133C 'result':149C 'score':162C 'segment':57B,109C 'self':27B 'self-host':26B 'specif':36B 'success':131C,143C 'support':89C 'take':61B 'takeov':8A,151C 'u/c':178C 'unauthent':7A,101C 'vector':170C 'version':45B,90C 'vulner':73C,99C,147C 'without':58B","nicknames":[],"mitigations":[],"who_affected":"Teams running Oracle Management Pack for Oracle GoldenGate versions 13.4.1.0.1 through 13.5.2.0.6 with the EM Plugin component, on hosts reachable from an adjacent network segment. Sources do not say which deployment layouts are most exposed, so unknown whether internet-facing setups matter; teams not running this product can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:20:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91517","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91517","severity":null,"published_at":"2026-10-20T22:20:55+00:00","modified_at":"2026-10-21T18:44:55+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:00+00:00","note":null},{"source":"epss","external_id":"CVE-2026-91517","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-91517","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:51+00:00","fetched_at":"2026-10-25T12:38:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}