CVE-2026-71064: database server from 19.3 (inclusive), through 19.32 (inclusive), from 21.3 (inclusive), through 21.23 (inclusive)…

Affected technology

database server · from 19.3 (inclusive), through 19.32 (inclusive)
oracle

database server · from 21.3 (inclusive), through 21.23 (inclusive)
oracle

database server · from 23.4.0 (inclusive), through 23.26.3 (inclusive)
oracle

Oracle Database Server · 19.3 through 19.32, 21.3 through 21.23, 23.4.0 through 23.26.3
Oracle Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Unauthenticated attacker with access to the physical communication segment attached can the hardware where the Portable Clusterware executes to compromise Portable Clusterware. Vendor/CNA’s CVSS 3.1 assessment (base score 9.6/10) rates confidentiality, integrity and availability impact as high.