Threats Tagged 'cve-2026-70868'

Oracle has released a Critical Security Patch Update (CSPU) in August 2026 addressing multiple vulnerabilities across a wide range of Oracle Database products and related software. The update includes 943 security patches targeting Oracle Database Server, Essbase, Autonomous Health Framework, Application Testing Suite, and many other Oracle product families. The vulnerabilities include issues classified under CWE-770, CWE-416, CWE-476, and CWE-863. Oracle strongly recommends applying these patches promptly to mitigate risks, as some vulnerabilities have been subject to attempted exploitation in the wild. The advisory emphasizes staying on actively supported versions and applying patches without delay.

CVE-2026-70868 is a vulnerability in Oracle Application Testing Suite version 13.3.0.1 that allows an unauthenticated attacker with network access via HTTP to potentially take over the application. The vulnerability is difficult to exploit but can lead to full confidentiality, integrity, and availability compromise. It has a CVSS 3.1 base score of 8.1, indicating high severity. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across many products.