PT-2026-44526 · Oracle · Oracle Database Server+1

Hexrabbit · CVE-2026-46833 · Published 2026-05-28 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.2

Description A flaw in the Net Service component allows an unauthenticated attacker with network access via TLS to compromise the service. Although difficult to exploit, a successful attack can result in a complete takeover of the Net Service and may significantly impact additional products due to a scope change.

Recommendations Update Oracle Database Server versions 23.4.0 through 23.26.2 to the latest security updates provided by Oracle.

Fix

Related Identifiers

CVE-2026-46833

Affected Products

Oracle Database Server

Database Server

References · 6

• https://oracle.com/security-alerts/cspumay2026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46833 · Security Note
• https://twitter.com/integ_sec/status/2065785022884225121 · Twitter Post
• https://t.me/cveNotify/208520 · Telegram Post
• https://twitter.com/UpwindMDR/status/2060357947494940844 · Twitter Post
• https://twitter.com/wazuh/status/2064744113929367758 · Twitter Post