VulnerabilityAwaiting Analysis

CVE-2026-101510

Vulnerability in the Oracle Net Services component of Oracle Database Server.

MEDIUM 4.4EPSS 0.15%

Does this matter?

Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.

Description

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows high privileged attacker having None privilege with logon to the infrastructure where Oracle Net Services executes to compromise Oracle Net Services. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.1: 4.4 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.15% probability · 4th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Source: secalert_us@oracle.com

EPSS trend

EPSS moved from 0.2% on 21 October 2026 to 0.2% on 26 October 2026.

References

https://www.oracle.com/security-alerts/cpuoct2026.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.