Threat Intelligence Database

CVE-2026-71143 is a high-severity vulnerability in Oracle Communications Unified Inventory Management that allows an unauthenticated attacker with network access via HTTP to potentially create, delete, or modify critical data. The vulnerability affects versions 7.5.0, 7.5.1, 7.6.0 through 7.8.0, and 8.0.1. Successful exploitation could result in unauthorized access and modification of all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 7.4, indicating significant confidentiality and integrity impacts but no impact on availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, and strongly recommends applying patches promptly.

CVE-2026-71142 is a high-severity vulnerability in Oracle Communications Unified Inventory Management affecting versions 7.5.0 through 7.5.1, 7.6.0 through 7.8.0, and 8.0.1. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or potentially complete access to all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring privileges or user interaction.

CVE-2026-61095 is a high-severity vulnerability in Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or full access to all accessible data within the product. The vulnerability also permits unauthorized update, insert, or delete operations on some accessible data. The CVSS 3.1 base score is 7.1, reflecting high confidentiality impact and low integrity impact without affecting availability. No official patch or remediation level is confirmed yet, and no known exploits in the wild have been reported. Oracle’s July 2026 Critical Patch Update advisory references this vulnerability but does not explicitly confirm patch availability for it yet.