CVE-2026-46775: Critical severity Oracle Oracle REST Data Services vulnerability
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. While the vulnerability is in Oracle REST Data Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle REST Data Services. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46775?
The severity of CVE-2026-46775 is critical with a CVSS score of 9.9.
How can I mitigate CVE-2026-46775?
To mitigate CVE-2026-46775, upgrade your Oracle REST Data Services to version 26.2.0 or later.
What is the impact of CVE-2026-46775?
CVE-2026-46775 allows a low privileged attacker to compromise Oracle REST Data Services through easily exploitable network access.
Which versions of Oracle REST Data Services are affected by CVE-2026-46775?
The affected versions of Oracle REST Data Services are 24.2.0 to 26.1.0.
Is CVE-2026-46775 remotely exploitable?
Yes, CVE-2026-46775 is remotely exploitable via HTTPS network access.