Oracle Cloud Native Environment Command Line Interface

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-35255 May 06, 08:05 MEDIUM This Month

Malicious environment variable injection in Oracle Cloud Native Environment Command Line Interface v2.3.2 allows local authenticated users with low privileges to execute arbitrary code through user interaction, compromising systems running the affected CLI tool. The vulnerability requires local access and user action but results in high-impact code execution with full confidentiality and integrity compromise.

RCE Code Injection Oracle Oracle Cloud Native Environment Command Line Interface Oracle Corporation

NVD

CVSS 3.1

6.6

EPSS

0.0%

CVE-2026-35255

EPSS 0% CVSS 6.6

MEDIUM This Month

Malicious environment variable injection in Oracle Cloud Native Environment Command Line Interface v2.3.2 allows local authenticated users with low privileges to execute arbitrary code through user interaction, compromising systems running the affected CLI tool. The vulnerability requires local access and user action but results in high-impact code execution with full confidentiality and integrity compromise.

RCE Code Injection Oracle +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy