CVE-2026-23927

Name of the Vulnerable Software and Affected Versions Agent 2 (affected versions not specified)

Description A user capable of connecting to Agent 2 can inject an Oracle TNS connection string through the 'service' parameter. This allows the software to connect to a server controlled by an attacker, potentially leaking Oracle database credentials if they are stored in a named session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.