CVE-2026-46839: Critical severity Oracle Oracle REST Data Services vulnerability
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. While the vulnerability is in Oracle REST Data Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle REST Data Services. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46839?
The severity of CVE-2026-46839 is rated as critical with a score of 9.9.
How do I fix CVE-2026-46839?
To fix CVE-2026-46839, update your Oracle REST Data Services to a version later than 26.1.0.
What impact does CVE-2026-46839 have on Oracle REST Data Services?
CVE-2026-46839 can allow a low privileged attacker to compromise Oracle REST Data Services through network access.
Which versions of Oracle REST Data Services are affected by CVE-2026-46839?
Affected versions of Oracle REST Data Services are those from 24.2.0 to 26.1.0.
Is CVE-2026-46839 easily exploitable?
Yes, CVE-2026-46839 is considered easily exploitable due to the low privilege requirement and network access.