PT-2026-3714 · Oracle · Oracle Hospitality Opera 5

Johnathan Law · Publicado 2026-01-20 · Atualizado 2026-01-21 · CVE-2026-21967

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 versions 5.6.19.23 through 5.6.27.4

Description An easily exploitable issue exists in the Oracle Hospitality OPERA 5 product, specifically within the Opera Servlet component. An unauthenticated attacker with network access via HTTP can compromise the system. Successful exploitation may lead to unauthorized access to critical data, complete access to all accessible data, unauthorized data manipulation (update, insert, or delete), and a partial denial of service.

Recommendations Oracle Hospitality OPERA 5 version 5.6.19.23 should be updated. Oracle Hospitality OPERA 5 version 5.6.25.17 should be updated. Oracle Hospitality OPERA 5 version 5.6.26.10 should be updated. Oracle Hospitality OPERA 5 version 5.6.27.4 should be updated.

Correção

Identificadores relacionados

CVE-2026-21967

Produtos afetados

Oracle Hospitality Opera 5

Referências · 5

• https://twitter.com/CVEnew/status/2013782992976781675 · Publicação no Twitter
• https://oracle.com/security-alerts/cpujan2026.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21967 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-21967 · Aviso do Fabricante
• https://twitter.com/CveFindCom/status/2013743240634130590 · Publicação no Twitter