Oracle Unified Directory EUVD-2026-61458

No special conditions are required for exploitation beyond network access to the OUD LDAP service port. The CVSS vector AV:N/AC:L/PR:N/UI:N confirms that the vulnerability is reachable over the network, requires no configuration complexity, and demands no authentication or user interaction - consistent with the 'Authentication Bypass' tag. Default deployments of Oracle Unified Directory 12.2.1.4.0 and 14.1.2.1.0 appear vulnerable. Exploitation is limited to confidentiality impact only; the attacker cannot modify directory data or cause a denial of service through this vulnerability. Network segmentation that prevents untrusted hosts from reaching the OUD LDAP listener (TCP/389 or LDAPS/636) is the primary limiting factor for organizations that have applied network zoning to their directory infrastructure.

The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N represents a worst-case confidentiality profile: remotely exploitable, no complexity, no credentials, no user interaction. Oracle's own advisory language - 'easily exploitable' - reinforces this. The authentication bypass tag from ENISA further narrows the attack class, distinguishing it from subtler access-control issues. Integrity and availability are unaffected per both the CVSS vector and description, limiting the blast radius to data exfiltration rather than directory modification or denial of service. No EPSS score was provided in the source data, preventing quantitative comparison with peer vulnerabilities; however, the combination of PR:N and a network-exposed LDAP service makes this an attractive reconnaissance or credential-harvesting target in any environment where OUD stores user credentials or sensitive identity attributes. KEV status is not confirmed and no public exploit code has been identified, which slightly lowers the immediate urgency compared to a KEV-listed flaw of comparable CVSS. Nevertheless, LDAP services are frequently exposed on internal networks with limited segmentation, and directory data (DN structures, user attributes, hashed or cleartext credentials) is high-value for lateral movement. Organizations should treat this as genuine priority, not a paper-high CVSS issue.

An attacker with network access to the OUD LDAP listener - including any internal network user or compromised host - sends a crafted LDAP bind or search request that exploits the authentication bypass in OUD Core. Without supplying valid credentials, the attacker receives full read access to the directory tree, potentially extracting user DN listings, email addresses, group memberships, hashed passwords, and other sensitive identity attributes stored in OUD. This data can directly enable credential stuffing, account enumeration, or targeted phishing against the organization's entire user population. No public exploit code has been identified at time of analysis, but the low complexity makes independent exploit development straightforward.