CVE-2026-47046: High severity Oracle Oracle Database Server vulnerability
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of RDBMS as well as unauthorized update, insert or delete access to some of RDBMS accessible data. CVSS 3.1 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47046?
The severity of CVE-2026-47046 is rated as high, with a CVSS score of 8.2.
How can I fix CVE-2026-47046?
To fix CVE-2026-47046, apply the latest security patches provided by Oracle for affected versions of the Oracle Database Server.
What are the affected versions for CVE-2026-47046?
The affected versions for CVE-2026-47046 are from Oracle Database Server 23.4.0 to 23.26.2.
What type of attack can exploit CVE-2026-47046?
An unauthenticated attacker with network access via Oracle Net can exploit CVE-2026-47046 to compromise the RDBMS.
What impact can exploitation of CVE-2026-47046 have?
Successful exploitation of CVE-2026-47046 can result in unauthorized access and potential data loss within the Oracle Database.