EUVD-2026-46805
GHSA-h97q-6rrw-wrxw
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Network-accessible Kubernetes Operator over HTTPS, low privilege required per description; pure availability impact, no confidentiality or integrity exposure.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
1DescriptionCVE.org
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of TimesTen In-Memory Database. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
AnalysisAI
Denial-of-service in Oracle TimesTen In-Memory Database 26.1.1.1.0 via the Kubernetes Operator component allows a low-privileged, network-authenticated attacker to repeatedly crash or hang the database over HTTPS. The attack is classified as easily exploitable with low complexity and no user interaction required, making it a straightforward availability threat in Kubernetes-managed deployments. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the low attack complexity elevates practical risk for environments where low-privileged accounts are broadly provisioned.
Technical ContextAI
Oracle TimesTen In-Memory Database is a relational in-memory data management system optimized for low-latency transactional workloads. The affected component is the Kubernetes Operator, a control-plane extension that automates deployment, scaling, and lifecycle management of TimesTen instances within Kubernetes clusters. The Kubernetes Operator exposes management interfaces over HTTPS, and the vulnerability resides in this interface's handling of requests from low-privileged principals. The CWE classification was not provided by the reporter, but based on the CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/A:H) and the described impact of a hang or repeatable crash, the root cause is consistent with improper input validation or resource exhaustion classes. The specific version affected is 26.1.1.1.0.
RemediationAI
Apply the Oracle Critical Patch Update for July 2026, available via the Oracle security advisory at https://www.oracle.com/security-alerts/cpujul2026.html. An exact patched version number beyond 26.1.1.1.0 was not independently confirmed in available data - consult the Oracle CPU directly for the target upgrade version before patching. As a compensating control, restrict HTTPS access to the TimesTen Kubernetes Operator management interface using Kubernetes NetworkPolicy or external ingress controls, limiting connectivity to trusted administrative principals only - this reduces the attack surface but does not eliminate the vulnerability if low-privileged accounts retain legitimate access. Auditing and minimizing the set of accounts with any access to the Kubernetes Operator is also advisable, as the vulnerability requires only low-privilege credentials. No workaround that fully mitigates the issue without patching was identified in available data.
More in Kubernetes
View allA critical vulnerability in Kubernetes ingress-nginx controller allows unauthenticated attackers with pod network access
Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio
Kubernetes ingress-nginx contains a configuration injection vulnerability via the mirror-target and mirror-host Ingress
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingres
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-c
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Rated critical severity (CVSS 9.9), this vulne
Unauthenticated remote attackers can trigger complete database overwrites, server-side file reads, and SSRF attacks agai
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4
Fluentd configuration injection in the kube-logging Logging operator before 6.6.0 allows a namespace-scoped user who can
Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today