Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-101375

Quick assessment

Affected

Oracle Corporation Oracle REST Data Services

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Oracle REST Data Services（组件：Database Actions）存在漏洞。受影响的受支持版本为 24.2.0 至 26.1.0。该漏洞易于利用，拥有网络访问权限的低权限攻击者可通过 HTTP 协议对 Oracle REST Data Services 实施攻击。成功利用此漏洞可导致：对 Oracle REST Data Services 可访问数据的部分未经授权更新、插入或删除操作；对部分可访问数据的未经授权读取；以及引发 Oracle REST Data Services 的部分拒绝服

CVSS 6.3 · Medium EPSS 0.25% · P15 Updated Oct 22, 2026

Possible ATT&CK Techniques 2 AI

T1078 · Valid Accounts T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Oracle Corporation	Oracle REST Data Services	`24.2.0≤ 26.1.0`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle REST Data Services accessible data as well as unauthorized read access to a subset of Oracle REST Data Services accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle REST Data Services. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Oracle Corporation	Oracle REST Data Services	24.2.0 ~ 26.1.0	-

II. Public POCs for CVE-2026-101375

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-101375

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-101375 (1)

🔗 Oracle Critical Patch Update Advisory - October 2026 Read full article vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-101375

Same Patch Batch · Oracle Corporation · 2026-10-20 · 1076 CVEs total

CVE-2026-101809	10.0 CRITICAL	Oracle EBS 12.2.3-15 Workflow 远程接管漏洞
CVE-2026-91221	10.0 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程代码执行漏洞
CVE-2026-91231	10.0 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程代码执行漏洞
CVE-2026-91299	10.0 CRITICAL	Oracle JD Edwards 9.2.0-9.2.26.5远程代码执行漏洞
CVE-2026-87337	10.0 CRITICAL	Oracle Access Manager 12.2.1.4.0/14.1.2.1.0 远程代码执行
CVE-2026-91216	10.0 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程代码执行漏洞
CVE-2026-91224	9.9 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程接管漏洞
CVE-2026-91251	9.9 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程接管漏洞
CVE-2026-91250	9.9 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程接管漏洞
CVE-2026-101503	9.9 CRITICAL	Oracle Trusted Answer Search 26.1 远程代码执行漏洞
CVE-2026-101501	9.9 CRITICAL	Oracle Trusted Answer Search 26.1 PL/SQL远程代码执行漏洞
CVE-2026-91354	9.9 CRITICAL	Oracle Outside In 8.5.8远程代码执行漏洞
CVE-2026-101528	9.9 CRITICAL	Oracle Enterprise Manager 13.5/24.1 远程代码执行漏洞
CVE-2026-91637	9.9 CRITICAL	Oracle Essbase 21.8.3.0.0 远程接管漏洞
CVE-2026-91638	9.9 CRITICAL	Oracle Essbase 21.8.3.0.0 远程接管漏洞
CVE-2026-91658	9.9 CRITICAL	Oracle Essbase 21.8.3.0.0 远程代码执行漏洞
CVE-2026-91222	9.9 CRITICAL	Oracle BPM Suite 12.2.1.4.0/14.1.2.0.0 SOAP 远程接管漏洞
CVE-2026-91663	9.9 CRITICAL	Oracle Essbase 21.8.3.0.0 远程代码执行漏洞
CVE-2026-101529	9.9 CRITICAL	Oracle Enterprise Manager 13.5/24.1 远程代码执行漏洞
CVE-2026-91232	9.9 CRITICAL	Oracle SOA Suite 12.2.1.4.0 和 14.1.2.0.0 远程代码执行漏洞

Showing top 20 of 1076 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Oracle REST Data Services

Same vendor: Oracle Corporation