Threats Tagged 'cve-2026-70734'

Oracle has released a Critical Security Patch Update (CSPU) in August 2026 addressing multiple vulnerabilities across a wide range of Oracle Database products and related software. The update includes 943 security patches targeting Oracle Database Server, Essbase, Autonomous Health Framework, Application Testing Suite, and many other Oracle product families. The vulnerabilities include issues classified under CWE-770, CWE-416, CWE-476, and CWE-863. Oracle strongly recommends applying these patches promptly to mitigate risks, as some vulnerabilities have been subject to attempted exploitation in the wild. The advisory emphasizes staying on actively supported versions and applying patches without delay.

CVE-2026-70734 is a vulnerability in Oracle Autonomous Health Framework's Trace File Analyzer component affecting versions 26 through 26.5.2. It allows a high privileged attacker with logon access to the infrastructure to compromise the framework, requiring human interaction from another user. Successful exploitation can lead to unauthorized modification or deletion of critical data and cause denial of service by crashing the framework. The vulnerability has a CVSS 3.1 base score of 7.4, indicating high severity with integrity and availability impacts.