Oracle TimesTen CVE-2026-101600

Exploitation requires the attacker to already hold a low-privileged local logon account on the infrastructure where Oracle TimesTen In-Memory Database (versions 26.1 through 26.1.1.3.0) executes - remote exploitation is not possible (AV:L). High attack complexity (AC:H) further means the attacker must satisfy conditions outside their control (e.g., winning a race or specific runtime/configuration state) for the attack to succeed. These limiting factors - mandatory local authenticated access plus difficult preconditions - substantially constrain realistic exploitation, and impact is confined to partial read and partial modify/insert/delete of a subset of database-accessible data with no availability impact.

This is a low-severity issue (CVSS 3.1 base 3.6) that should rank near the bottom of any prioritization queue. The vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N shows every signal pointing away from easy exploitation: local attack vector (AV:L) requires the attacker to already have logon access to the host running TimesTen, high attack complexity (AC:H) means conditions outside the attacker's control must be met, and low privileges (PR:L) are still required. Impact is limited to partial confidentiality and integrity (C:L/I:L) with no availability impact (A:N). No EPSS score, CISA KEV listing, or POC is present in the provided data - so there is no public exploit identified at time of analysis and no evidence of active exploitation. All signals are consistent and point to a genuinely low real-world risk; there is no high-CVSS-but-overblown dynamic here because the CVSS itself is low. Note one metadata conflict: the input Tags include 'Authentication Bypass,' which contradicts the description and CVSS vector - the flaw requires an authenticated low-privileged local user (PR:L) rather than bypassing authentication; treat that tag as erroneous.

A low-privileged user who already has a local login on the server hosting Oracle TimesTen In-Memory Database leverages a difficult-to-exploit flaw in the TimesTen IMDB component to gain unauthorized read access to a subset of database data and unauthorized update, insert, or delete access to some accessible data. The high attack complexity means the attacker must satisfy specific preconditions on the host, and no public exploit code is known to exist.