This vulnerability affects Oracle GoldenGate Stream Analytics component Security in version 26.1.0.0.0. It allows an attacker with low privileges and logon access to the infrastructure to compromise the product, resulting in a partial denial of service condition. The CVSS vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) indicates that the attack requires local access with low complexity and privileges, no user interaction, and impacts only availability. The vulnerability is tracked as CWE-400 (Uncontrolled Resource Consumption). Oracle's July 2026 Critical Patch Update advisory lists this vulnerability among the addressed issues but does not explicitly confirm patch availability for this specific version in the advisory text provided.

Successful exploitation allows an attacker with low privileges and logon access to cause a partial denial of service on GoldenGate Stream Analytics. There is no impact on confidentiality or integrity. The impact is limited to availability degradation of the affected product.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory. Customers are strongly recommended to apply the relevant patches from this update promptly. Since the advisory covers GoldenGate Stream Analytics versions including 26.1.0.0.0, applying the July 2026 Critical Patch Update is the official remediation. Patch status is confirmed by the vendor advisory. No additional mitigation steps are specified beyond applying the official patches.