CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-47040

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Net Services accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 9.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 38.6%

CVSS Severity

CVSS v3 Score 9.1

References

https://www.oracle.com/security-alerts/cpujul2026.html

Products affected by CVE-2026-47040

Oracle » Database Server » Version: 19.10

cpe:2.3:a:oracle:database_server:19.10
Oracle » Database Server » Version: 19.11

cpe:2.3:a:oracle:database_server:19.11
Oracle » Database Server » Version: 19.12

cpe:2.3:a:oracle:database_server:19.12
Oracle » Database Server » Version: 19.13

cpe:2.3:a:oracle:database_server:19.13
Oracle » Database Server » Version: 19.14

cpe:2.3:a:oracle:database_server:19.14
Oracle » Database Server » Version: 19.15

cpe:2.3:a:oracle:database_server:19.15
Oracle » Database Server » Version: 19.16

cpe:2.3:a:oracle:database_server:19.16
Oracle » Database Server » Version: 19.17

cpe:2.3:a:oracle:database_server:19.17
Oracle » Database Server » Version: 19.18

cpe:2.3:a:oracle:database_server:19.18
Oracle » Database Server » Version: 19.19

cpe:2.3:a:oracle:database_server:19.19
Oracle » Database Server » Version: 19.20

cpe:2.3:a:oracle:database_server:19.20
Oracle » Database Server » Version: 19.21

cpe:2.3:a:oracle:database_server:19.21
Oracle » Database Server » Version: 19.22

cpe:2.3:a:oracle:database_server:19.22
Oracle » Database Server » Version: 19.23

cpe:2.3:a:oracle:database_server:19.23
Oracle » Database Server » Version: 19.27

cpe:2.3:a:oracle:database_server:19.27
Oracle » Database Server » Version: 19.28

cpe:2.3:a:oracle:database_server:19.28
Oracle » Database Server » Version: 19.3

cpe:2.3:a:oracle:database_server:19.3
Oracle » Database Server » Version: 19.4

cpe:2.3:a:oracle:database_server:19.4
Oracle » Database Server » Version: 19.5

cpe:2.3:a:oracle:database_server:19.5
Oracle » Database Server » Version: 19.6

cpe:2.3:a:oracle:database_server:19.6
Oracle » Database Server » Version: 19.7

cpe:2.3:a:oracle:database_server:19.7
Oracle » Database Server » Version: 19.8

cpe:2.3:a:oracle:database_server:19.8
Oracle » Database Server » Version: 19.9

cpe:2.3:a:oracle:database_server:19.9
Oracle » Database Server » Version: 21.11

cpe:2.3:a:oracle:database_server:21.11
Oracle » Database Server » Version: 21.12

cpe:2.3:a:oracle:database_server:21.12
Oracle » Database Server » Version: 21.13

cpe:2.3:a:oracle:database_server:21.13
Oracle » Database Server » Version: 21.14

cpe:2.3:a:oracle:database_server:21.14
Oracle » Database Server » Version: 21.18

cpe:2.3:a:oracle:database_server:21.18
Oracle » Database Server » Version: 21.19

cpe:2.3:a:oracle:database_server:21.19
Oracle » Database Server » Version: 21.3

cpe:2.3:a:oracle:database_server:21.3
Oracle » Database Server » Version: 23.26

cpe:2.3:a:oracle:database_server:23.26
Oracle » Database Server » Version: 23.4

cpe:2.3:a:oracle:database_server:23.4
Oracle » Database Server » Version: 23.8

cpe:2.3:a:oracle:database_server:23.8
Oracle » Database Server » Version: 23.9

cpe:2.3:a:oracle:database_server:23.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-47040

Products

Pricing

Contact Us