CVE-2026-46833

Vulnerability in the Net Service component of Oracle Database Server

Critical · published May 28, 2026

CVSS v3.1
9.0
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Net Service. While the vulnerability is in Net Service, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Net Service. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

The record
Technical detail
CVSS v3.1
9.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00424 · 35.6th percentile
Published
2026-05-28T20:17Z
EPSS history
Timeline
  • 28 MAY 20:17Z
    Vulnerability in the Net Service component of Oracle Database Server
    cvelistv5