This vulnerability affects Oracle TimesTen In-Memory Database component Kubernetes Operator in version 26.1.1.1.0. It allows an attacker with low privileges and network access over HTTPS to cause a partial denial of service, impacting availability. The CVSS 3.1 base score is 4.3, reflecting a medium severity with an attack vector of network, low attack complexity, and no user interaction required. The vulnerability does not impact confidentiality or integrity. Oracle's July 2026 Critical Patch Update advisory references multiple patches but does not explicitly confirm a patch for this specific CVE. Customers are urged to apply security patches from Oracle promptly.

Successful exploitation results in unauthorized partial denial of service of the TimesTen In-Memory Database, impacting availability. There is no impact on confidentiality or integrity according to the CVSS vector. The vulnerability requires network access via HTTPS and low privileges, making it moderately accessible to attackers.

Oracle's July 2026 Critical Patch Update advisory should be consulted for patch availability and installation instructions. Although no explicit patch or remediation level is stated for CVE-2026-60410, Oracle recommends applying all relevant security patches without delay. Users should remain on actively supported versions and monitor Oracle advisories for updates. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.