EUVD-2026-46812
GHSA-r937-25r6-qwr8
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Network-accessible HTTPS vector with mandatory low-privileged authentication (PR:L), no user interaction, and exclusively partial availability impact (A:L) with no confidentiality or integrity effects.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
1DescriptionCVE.org
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of TimesTen In-Memory Database. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
AnalysisAI
Partial denial-of-service exposure in Oracle TimesTen In-Memory Database's Kubernetes Operator component (version 26.1.1.1.0) allows a low-privileged, network-authenticated attacker to degrade database availability via crafted HTTPS requests. The attack requires no user interaction and is rated easily exploitable by Oracle, though impact is limited to partial availability loss with no confidentiality or integrity effects. No public exploit code or CISA KEV listing has been identified at time of analysis.
Technical ContextAI
Oracle TimesTen In-Memory Database is a high-performance, relational in-memory database designed for low-latency workloads. The affected component is its Kubernetes Operator, a controller that manages TimesTen instances running inside Kubernetes clusters - typically handling lifecycle operations such as provisioning, scaling, and configuration of TimesTen pods. The vulnerability exposes the Operator's HTTPS-accessible interface to partial availability disruption when a low-privileged actor sends specially crafted requests. No CWE identifier is assigned, so the precise root-cause class (e.g., resource exhaustion, improper input validation, or unhandled exception) cannot be confirmed from available data. The affected CPE-equivalent scope is TimesTen In-Memory Database 26.1.1.1.0 in a Kubernetes-deployed topology.
RemediationAI
Apply the Oracle Critical Patch Update for July 2026, which addresses this vulnerability; the advisory is available at https://www.oracle.com/security-alerts/cpujul2026.html. Oracle does not publish granular patch version numbers in the CPU summary, so the exact remediated build should be confirmed via Oracle My Support (MOS) or the TimesTen release notes. As a compensating control prior to patching, restrict HTTPS access to the TimesTen Kubernetes Operator endpoint to only explicitly trusted service accounts and namespaces using Kubernetes NetworkPolicy and RBAC rules, reducing the pool of accounts that could act as low-privileged attackers. Note that overly restrictive NetworkPolicy rules may interfere with Operator-to-pod communication, so changes should be tested in a non-production cluster first.
More in Kubernetes
View allA critical vulnerability in Kubernetes ingress-nginx controller allows unauthenticated attackers with pod network access
Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio
Kubernetes ingress-nginx contains a configuration injection vulnerability via the mirror-target and mirror-host Ingress
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingres
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-c
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Rated critical severity (CVSS 9.9), this vulne
Unauthenticated remote attackers can trigger complete database overwrites, server-side file reads, and SSRF attacks agai
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4
Fluentd configuration injection in the kube-logging Logging operator before 6.6.0 allows a namespace-scoped user who can
Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today