CVE-2026-21982

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)

High · published January 20, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

⚡ An unauthenticated attacker could snatch control of your Oracle VM VirtualBox, all by hanging out in the local communication segment! 🔥 Picture this as a sneaky intruder who finds a backdoor to a data center and takes control of the servers without anyone noticing — that’s how vulnerable your VirtualBox can be! 🔐 If exploited, this vulnerability means an attacker can take over your entire Oracle VM VirtualBox environment, potentially leading to data breaches, unauthorized access to sensitive information, and disruptions to your operations. It's like handing the keys to your whole digital kingdom to an outsider without even realizing it!

Put simply

Picture this as a sneaky intruder who finds a backdoor to a data center and takes control of the servers without anyone noticing — that’s how vulnerable your VirtualBox can be! 🔐 CVE-2026-21982 is a vulnerability in Oracle VM VirtualBox that allows an unauthenticated attacker with physical access to the communication segment to compromise the software. This affects versions 7.1.14 and 7.2.4, making it easier for attackers to exploit given the right conditions.

What to do

If exploited, this vulnerability means an attacker can take over your entire Oracle VM VirtualBox environment, potentially leading to data breaches, unauthorized access to sensitive information, and disruptions to your operations. It's like handing the keys to your whole digital kingdom to an outsider without even realizing it! To mitigate this risk, upgrade to the latest version of Oracle VM VirtualBox as soon as possible. Monitor access to the hardware and restrict physical access to authorized personnel only. Ensure regular security audits to keep your environment safe! You've got this! Follow these steps, and you’ll secure your VirtualBox in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Published
2026-01-20T21:56Z
EPSS history
Timeline
  • 20 JAN 21:56Z
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
    cvelistv5