CVE-2026-46840

216.73.217.22

· Published 28/05/2026 21:16 · Modified 29/05/2026 16:16

Labels: CVE-2026-46840 2026-05-28 CVE-2026-46840 CWE-284 [email protected]

Essential information

Published: 28/05/2026 21:16
Modified: 29/05/2026 16:16
Author: —
Creator: —
CVSS: 10.0 CRITICAL (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS metrics

Description

Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. While the vulnerability is in Oracle REST Data Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle REST Data Services. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

NVD status

Status: Undergoing Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
oracle / oracle rest data services	`cpe:2.3:a:oracle:oracle_rest_data_services:24.2.0-26.1.0:::::::*`