EUVD-2026-46813
GHSA-97q9-mwr7-whw9
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Adjacent vector confirmed by description; PR:N as no credentials required; A:H for frequently repeatable crash; no confidentiality or integrity impact described.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
1DescriptionCVE.org
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: ttcserver). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the TimesTen In-Memory Database executes to compromise TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of TimesTen In-Memory Database. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
AnalysisAI
Denial-of-service in Oracle TimesTen In-Memory Database 26.1.1.1.0 allows unauthenticated attackers on the same network segment to crash or indefinitely hang the database service via the ttcserver component. The adjacent-network vector (AV:A) constrains reachability to the local physical or logical segment, but once positioned, exploitation requires no credentials and no user interaction, making the crash frequently repeatable. No public exploit code or active exploitation has been identified at time of analysis.
Technical ContextAI
The vulnerability resides in ttcserver, the client-server communication handler for Oracle TimesTen In-Memory Database - a high-performance, in-memory relational database optimized for low-latency data access, commonly deployed in financial services, telecom, and real-time analytics pipelines. The adjacent attack vector (AV:A per CVSS) indicates the attacker must reside on the same physical or logical network segment (e.g., LAN, VLAN, or shared subnet) as the database host. The CWE has not been assigned in the available intelligence, so the precise root cause class - whether resource exhaustion, improper input validation, or protocol parsing error within ttcserver - cannot be confirmed. Oracle confirmed only version 26.1.1.1.0 as the affected supported release; no CPE string was provided in the available data.
RemediationAI
Apply Oracle's Critical Patch Update (CPU) for July 2026, which addresses this vulnerability; the advisory is published at https://www.oracle.com/security-alerts/cpujul2026.html. The exact patched version number is not independently confirmed from the available data beyond the CPU reference - consult Oracle's advisory directly for the target upgrade version. As compensating controls while patching, restrict network access to the ttcserver listening port using host-based firewall rules or network ACLs so only trusted application servers on the adjacent segment can reach the database service; this directly addresses the AV:A attack vector. Place the TimesTen instance on a dedicated, isolated VLAN or subnet accessible exclusively by authorized application nodes, reducing lateral exposure. Monitor for unexpected database process crashes or hang conditions as potential indicators of exploitation attempts. Note that network isolation alone does not eliminate the vulnerability - patch application remains the definitive remediation.
More in Timesten In Memory Database
View allIn Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL proto
cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments. Rated critical severity (CVSS 9.8), this
cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal. Rated critical severity (CVSS 9.8)
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate e
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Rated high severity (CVSS 8.3), thi
Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in
DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. Rated high severity (
This affects the package json before 10.0.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable,
A vulnerability was found in Hibernate-Validator. Rated medium severity (CVSS 6.1), this vulnerability is remotely explo
Privilege-escalating takeover of Oracle TimesTen In-Memory Database 26.1.1.1.0 is possible through its Kubernetes Operat
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today