VulnerabilityAnalyzed

CVE-2026-35253

Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects.

MEDIUM 4.7EPSS 0.15%

Does this matter?

Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.

Description

Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected is v0.22.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Macaron Tool. Successful attacks of this vulnerability can result in Oracle Macaron Tool failing host address validation.

CVSS 3.1: 4.7 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
EPSS: 0.15% probability · 4th percentile
CISA KEV: Not listed
Weakness: CWE-601, CWE-346
Affected: oracle/macaron
Source: secalert_us@oracle.com

References

https://www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.htmlNot Applicable

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.