This vulnerability in Oracle Database Server's RDBMS component affects version 23.4.0 and allows an attacker with low privileges and authenticated network access via Oracle Net to compromise the database server. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high impact on confidentiality, integrity, and availability, with scope change affecting additional products. Oracle's Critical Security Patch Update advisory for August 2026 references multiple security patches across products but does not explicitly confirm a patch for this specific vulnerability or version in the provided content. The vulnerability is difficult to exploit but can result in full takeover of the RDBMS if successfully exploited.

Successful exploitation can lead to complete compromise of the Oracle Database Server RDBMS, affecting confidentiality, integrity, and availability of the database. The vulnerability also has scope change implications, potentially impacting additional Oracle products beyond the RDBMS component.

Oracle has released a Critical Security Patch Update advisory in August 2026 covering numerous vulnerabilities across its product families. Customers are strongly advised to remain on actively supported versions and apply Oracle patches promptly. However, patch availability for this specific vulnerability and version is not explicitly confirmed in the advisory content provided. Users should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch and remediation information. Until a patch is confirmed, monitor Oracle's official channels for updates.