CVE-2026-35253 is a vulnerability in the Oracle Macaron Tool version 0.22.0 that allows an unauthenticated attacker with network access via HTTP to compromise the tool by causing it to fail host address validation. The vulnerability has a medium severity with a CVSS score of 4.7. No public patch or remediation details are currently provided by Oracle.