EUVD-2026-46811
GHSA-vc95-58xv-9jq4
Severity by source
AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Local-only vector and high-privilege prerequisite confirmed by description; scope change reflects Kubernetes Operator's potential cluster-wide reach; all three impacts are partial (C:L/I:L/A:L) per advisory.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
1DescriptionCVE.org
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen In-Memory Database executes to compromise TimesTen In-Memory Database. While the vulnerability is in TimesTen In-Memory Database, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of TimesTen In-Memory Database accessible data as well as unauthorized read access to a subset of TimesTen In-Memory Database accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of TimesTen In-Memory Database. CVSS 3.1 Base Score 5.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).
AnalysisAI
TimesTen In-Memory Database 26.1.1.1.0 contains a medium-severity flaw in its Kubernetes Operator component, exploitable by local high-privileged attackers to gain partial unauthorized read, write, and denial-of-service capability against database data. Critically, the CVSS scope change (S:C) signals that a successful attack may cascade to additional products sharing the Kubernetes cluster, elevating the real-world blast radius beyond the individual component score. No public exploit code and no CISA KEV listing have been identified at time of analysis; Oracle confirmed the issue in the July 2026 Critical Patch Update.
Technical ContextAI
The vulnerability resides in the Kubernetes Operator component of Oracle TimesTen In-Memory Database version 26.1.1.1.0. Kubernetes Operators are software extensions that automate application lifecycle management within a Kubernetes cluster, typically running with elevated service account permissions to manage custom resources and cluster state. A flaw in an Operator can therefore have cluster-wide consequences, consistent with the CVSS scope change indicator (S:C). TimesTen In-Memory Database is Oracle's specialized in-memory relational database designed for extreme-low-latency transactional workloads; its Kubernetes Operator manages deployment and configuration within containerized environments. No CWE classification was assigned by the reporter, leaving the precise root-cause class - whether misconfigurations, privilege escalation via RBAC, insecure secrets handling, or another class - unspecified. The affected product is confirmed as Oracle TimesTen In-Memory Database 26.1.1.1.0 per both NVD and EUVD-2026-46811.
RemediationAI
Apply the patch provided in Oracle's Critical Patch Update for July 2026, available at https://www.oracle.com/security-alerts/cpujul2026.html. The exact target patched version beyond 26.1.1.1.0 is not explicitly stated in the provided data - consult the Oracle advisory or Oracle Support directly to confirm the specific upgrade target before deployment. As compensating controls while patching, restrict infrastructure-level logon access (SSH, console, Kubernetes node access) to the hosts running TimesTen, enforcing the principle of least privilege. Audit and tighten Kubernetes RBAC policies governing the TimesTen Operator service account, removing any cluster-wide permissions not strictly required for its operation; this limits the scope-change exploitation path to adjacent workloads. Consider deploying TimesTen in a dedicated namespace with network policies that isolate it from unrelated workloads, reducing the blast radius if the Operator is exploited. These controls trade operational flexibility for a reduced attack surface but do not eliminate the underlying vulnerability.
More in Kubernetes
View allA critical vulnerability in Kubernetes ingress-nginx controller allows unauthenticated attackers with pod network access
Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio
Kubernetes ingress-nginx contains a configuration injection vulnerability via the mirror-target and mirror-host Ingress
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingres
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-c
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Rated critical severity (CVSS 9.9), this vulne
Unauthenticated remote attackers can trigger complete database overwrites, server-side file reads, and SSRF attacks agai
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4
Fluentd configuration injection in the kube-logging Logging operator before 6.6.0 allows a namespace-scoped user who can
Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass
Same weakness CWE-284 – Improper Access Control
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today