CVE-2026-83088: High severity Oracle Oracle Database Server (RDBMS) vulnerability
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise RDBMS. While the vulnerability is in RDBMS, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of RDBMS. CVSS 3.1 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs network access to the database through Oracle Net and must have the low-privileged Authenticated User privilege. No user interaction is required.
Which deployments are affected?
Affected supported Oracle Database Server RDBMS versions are 23.4.0 through 23.26.3. The provided information does not state whether any particular default configuration exposes Oracle Net or grants the required privilege.
What is the expected impact of a successful attack?
A successful attacker can cause the RDBMS to hang or crash repeatedly, resulting in complete denial of service. The scope may extend to additional products impacted by attacks against the RDBMS.