CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-61106

Vulnerability in Oracle GoldenGate (component: Config Service Executable). Supported versions that are affected are 23.4-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 29.2%

CVSS Severity

CVSS v3 Score 8.1

References

https://www.oracle.com/security-alerts/cpujul2026.html

Products affected by CVE-2026-61106

Oracle » Goldengate » Version: 23.10

cpe:2.3:a:oracle:goldengate:23.10
Oracle » Goldengate » Version: 23.26.1.0.0

cpe:2.3:a:oracle:goldengate:23.26.1.0.0
Oracle » Goldengate » Version: 23.26.1.0.1

cpe:2.3:a:oracle:goldengate:23.26.1.0.1
Oracle » Goldengate » Version: 23.4

cpe:2.3:a:oracle:goldengate:23.4
Oracle » Goldengate » Version: 23.4.1

cpe:2.3:a:oracle:goldengate:23.4.1
Oracle » Goldengate » Version: 23.4.2

cpe:2.3:a:oracle:goldengate:23.4.2
Oracle » Goldengate » Version: 23.5

cpe:2.3:a:oracle:goldengate:23.5
Oracle » Goldengate » Version: 23.5.2

cpe:2.3:a:oracle:goldengate:23.5.2
Oracle » Goldengate » Version: 23.6

cpe:2.3:a:oracle:goldengate:23.6
Oracle » Goldengate » Version: 23.7

cpe:2.3:a:oracle:goldengate:23.7
Oracle » Goldengate » Version: 23.9

cpe:2.3:a:oracle:goldengate:23.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-61106

Products

Pricing

Contact Us