EUVD-2026-61683
GHSA-mwmv-2j8q-q8qh
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Network-reachable HTTP exploit requiring low-privilege credentials with no interaction; scope change to adjacent Oracle products justifies S:C, High confidentiality and Low integrity impact, with no availability effect.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
2DescriptionCVE.org
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Autonomous Health Framework. While the vulnerability is in Oracle Autonomous Health Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Autonomous Health Framework accessible data as well as unauthorized update, insert or delete access to some of Oracle Autonomous Health Framework accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).
AnalysisAI
Unauthorized data exposure in Oracle Autonomous Health Framework (Trace File Analyzer component) allows a low-privileged network attacker to gain complete read access to critical data and limited write capability across the framework and potentially connected Oracle products due to a scope-changing exploit path. Affected versions span the entire 26.x release family through 26.5.2, making this a broad exposure across current deployments. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to the Oracle Autonomous Health Framework over HTTP and at minimum low-privileged credentials to the Trace File Analyzer component, consistent with the CVSS PR:L metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 8.5 reflects genuine severity: network-reachable (AV:N), low complexity (AC:L), low privilege required (PR:L), no user interaction (UI:N), with scope change (S:C) enabling impact on additional Oracle products beyond AHF. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Oracle Critical Security Patch Update (CPU) for August 2026, available at https://www.oracle.com/security-alerts/cspuaug2026.html, which addresses this flaw across all affected 26.x versions of Oracle Autonomous Health Framework. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: conduct a complete inventory of systems running Oracle AHF versions 26.x through 26.5.2 (prioritize production Oracle Autonomous Database and Exadata deployments), classify data sensitivity and determine which systems contain regulated or high-value information, and implement network-level access controls restricting inbound connections to AHF management endpoints to administrative networks only, blocking unauthenticated access. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Autonomous Health Framework
View allLocal privilege escalation and denial-of-service in Oracle Autonomous Health Framework's Trace File Analyzer component a
Data integrity and availability compromise in Oracle Autonomous Health Framework's Trace File Analyzer component affects
Full takeover of Oracle Autonomous Health Framework is achievable by an unauthenticated attacker positioned on the same
Unauthorized data access and modification in Oracle Autonomous Health Framework's Cluster Health Analyzer component allo
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today