AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-55998

MEDIUM · CVSS 5.3 EPSS 0.21% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-05 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The vulnerability affects Oracle's endpoint for retrieving cluster objects, which fails to validate tokens properly, allowing attackers to exploit this oversight. Specifically, when a valid cluster ID linked to private registry secrets is accessed, it triggers a nil pointer dereference, resulting in an HTTP 502 Bad Gateway response, while non-existent cluster IDs return an HTTP 200, enabling reliable enumeration of valid cluster IDs. Organizations using Oracle products should prioritize addressing this vulnerability to mitigate potential information disclosure risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-55998
Severity
MEDIUM
CVSS
5.3
EPSS
0.21%
Oracle

Original NVD Description

The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/private_registry.go causes the request to return HTTP 502 Bad Gateway. For cluster IDs that do not exist, the endpoint returns HTTP 200. This observable difference in response codes constitutes a reliable enumeration oracle.