PT-2026-44525

CVE-2026-46830

·

Published

2026-05-28

·

Updated

2026-07-21

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0
Description An issue in the Mongoapi component allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to unauthorized read access to a subset of accessible data.
Recommendations Update Oracle REST Data Services to a version later than 26.1.0.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2026-46830
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com