This vulnerability affects Oracle TimesTen In-Memory Database 26.1.1.1.0 and is exploitable by an attacker with low privileges and network access over HTTPS. Successful exploitation results in a denial of service condition by causing the database to hang or crash repeatedly. The vulnerability is categorized under CWE-400 (Uncontrolled Resource Consumption). The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. The vendor advisory from Oracle does not explicitly confirm a patch or remediation level for this specific vulnerability as of the July 2026 Critical Patch Update advisory.

Exploitation of this vulnerability allows an attacker to cause a complete denial of service (DoS) on the TimesTen In-Memory Database, resulting in hangs or frequent crashes. There is no impact on confidentiality or integrity of data. The availability impact is high, potentially disrupting database operations.

Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly when available. Until a patch is released, consider restricting network access to the TimesTen In-Memory Database Kubernetes Operator component to trusted sources only to reduce exposure.