CVE-2026-71064

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.32 Oracle Database Server versions 21.3 through 21.23 Oracle Database Server versions 23.4.0 through 23.26.3

Description A flaw exists in the Portable Clusterware component. An unauthenticated attacker with access to the physical communication segment attached to the hardware where the Portable Clusterware executes can compromise the component. Successful exploitation can lead to a complete takeover of Portable Clusterware and may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.