CVE-2026-61223: Critical severity Oracle Oracle Communications Converged Application Server vulnerability
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP/IP to compromise Oracle Communications Converged Application Server. While the vulnerability is in Oracle Communications Converged Application Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Communications Converged Application Server. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61223?
The severity of CVE-2026-61223 is critical with a score of 9.
How do I fix CVE-2026-61223?
To fix CVE-2026-61223, upgrade to a patched version of Oracle Communications Converged Application Server.
What component is affected by CVE-2026-61223?
CVE-2026-61223 affects the Security component of the Oracle Communications Converged Application Server.
What versions are impacted by CVE-2026-61223?
The supported versions impacted by CVE-2026-61223 are 8.2 and 8.3.
Can CVE-2026-61223 be exploited remotely?
Yes, CVE-2026-61223 can be exploited remotely by an unauthenticated attacker with network access.