CVE-2026-60175: High severity Oracle Oracle Database Server vulnerability
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in takeover of RDBMS. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60175?
The severity of CVE-2026-60175 is rated high with a score of 8.8.
What systems are affected by CVE-2026-60175?
CVE-2026-60175 affects Oracle Database Server versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2.
How do I fix CVE-2026-60175?
To fix CVE-2026-60175, apply the latest security updates and patches provided by Oracle for the affected database versions.
What type of attack can exploit CVE-2026-60175?
CVE-2026-60175 can be exploited by a low-privileged attacker with Authenticated User privilege having network access via Oracle Net.
What does CVE-2026-60175 compromise?
CVE-2026-60175 allows an attacker to compromise the RDBMS component of Oracle Database Server.