EUVD-2026-62009
GHSA-cqqr-rw66-59mx
Severity by source
AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Adjacent interconnect access with no auth or interaction and low complexity (AV:A/AC:L/PR:N/UI:N); Clusterware takeover crosses trust boundary (S:C) with full C/I/A loss.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
2DescriptionCVE.org
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Portable Clusterware executes to compromise Portable Clusterware. While the vulnerability is in Portable Clusterware, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Portable Clusterware. CVSS 3.1 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
AnalysisAI
Full compromise of Oracle Portable Clusterware is possible for an unauthenticated attacker who can reach the physical communication segment attached to the clustering hardware, per Oracle's August 2026 Critical Patch Update (CVE-2026-71064). Affected releases span Oracle Database Server 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3, and because the flaw carries a scope change (S:C) a successful takeover can significantly impact additional products beyond Clusterware itself. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have access to the physical communication segment (the cluster interconnect) attached to the hardware where Portable Clusterware runs - that Adjacent-network foothold is the exact prerequisite named by Oracle, not remote internet reachability. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals align toward genuine high priority rather than an inflated CVSS: the vector AV:A/AC:L/PR:N/UI:N combines no authentication, low attack complexity, and no user interaction, and the scope change plus full C/I/A impact drive the 9.6 base score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Oracle Critical Patch Update of August 2026 (patch available per vendor advisory: https://www.oracle.com/security-alerts/cspuaug2026.html); Oracle publishes the specific patched Grid Infrastructure / Database release-update levels there, and no exact fixed build was included in this input, so pull the precise RU from that advisory for your 19c, 21c, or 23ai line. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: conduct inventory of all Oracle Database Server instances running versions 19.3-19.32, 21.3-21.23, or 23.4.0-23.26.3 and assess network topology to determine exposure of clustering communication hardware to potential threat actors; immediately implement firewall rules and network segmentation to restrict physical clustering network access to authorized administrative systems only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Database Server
View allThe TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Serv
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Serv
An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Datab
An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospik
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate e
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via v
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointe
Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.
An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database
An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today