Threats tagged 'ghsa-66cx-hvh5-47xm'

A high-severity vulnerability (CVE-2026-83348) exists in the RDBMS component of Oracle Database Server affecting versions 19.3 through 19.32, 21.3 through 21.23, and 23.4.0 through 23.26.3. This vulnerability allows a low-privileged attacker with Create DB Link privilege and network access via Oracle Net to compromise the database server, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.