VulnerabilityAwaiting Analysis

CVE-2026-101483

Vulnerability in Oracle Secure Backup (component: Device Management and Support).

MEDIUM 6.5EPSS 0.14%

Does this matter?

Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.

Description

Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Secure Backup. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS: 0.14% probability · 3th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Source: secalert_us@oracle.com

EPSS trend

EPSS moved from 0.1% on 21 October 2026 to 0.1% on 26 October 2026.

References

https://www.oracle.com/security-alerts/cpuoct2026.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.