CVE-2026-46840

Name of the Vulnerable Software and Affected Versions Oracle REST Data Services versions 24.2.0 through 26.1.0

Description An issue exists in the Backend-as-a-Service component of Oracle REST Data Services. An unauthenticated attacker with network access via HTTPS can exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle REST Data Services. The attack may also significantly impact additional products due to a scope change.

Recommendations For versions 24.2.0 through 26.1.0, apply the available patch to resolve the issue.