EUVD-2026-61686
GHSA-xc4g-wqr9-rwv9
Severity by source
AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Local access with low-privilege OS account required; scope change reflects cascade to dependent Oracle services; no confidentiality impact per description.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
2DescriptionCVE.org
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. While the vulnerability is in Oracle Autonomous Health Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Autonomous Health Framework accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Autonomous Health Framework. CVSS 3.1 Base Score 8.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H).
AnalysisAI
Local privilege escalation and denial-of-service in Oracle Autonomous Health Framework's Trace File Analyzer component affects versions 26 through 26.5.2, enabling low-privileged infrastructure users to corrupt or destroy critical data and crash the framework with scope change to dependent Oracle products. The CVSS 3.1 score of 8.4 reflects ease of exploitation once local access is obtained, with no user interaction required. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated local logon session on the infrastructure host where Oracle Autonomous Health Framework is installed and running - remote network-based attack is not possible given AV:L. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-confirmed CVSS 3.1 score of 8.4 (High) is driven by low attack complexity, low privilege requirement, no user interaction, and a scope change that amplifies impact beyond the primary component - factors that collectively raise the score despite the local-only attack vector. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Oracle's Critical Security Patch Update for August 2026 as the primary remediation, published at https://www.oracle.com/security-alerts/cspuaug2026.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all Oracle Autonomous Health Framework deployments running versions 26 through 26.5.2 and identify systems where local infrastructure users have access. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Autonomous Health Framework
View allUnauthorized data exposure in Oracle Autonomous Health Framework (Trace File Analyzer component) allows a low-privileged
Data integrity and availability compromise in Oracle Autonomous Health Framework's Trace File Analyzer component affects
Full takeover of Oracle Autonomous Health Framework is achievable by an unauthenticated attacker positioned on the same
Unauthorized data access and modification in Oracle Autonomous Health Framework's Cluster Health Analyzer component allo
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today