SEPTEMBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-60395

MEDIUM · CVSS 4.3 EPSS 0.29% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

A vulnerability in the Admin Server Executable of Oracle GoldenGate affects versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1, allowing low-privileged attackers with network access via HTTP to gain unauthorized read access to sensitive data. The impact is primarily on confidentiality, with a CVSS score of 4.3 indicating a medium severity level. Organizations using the affected versions should prioritize remediation to mitigate potential data exposure risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-60395
Severity
MEDIUM
CVSS
4.3
EPSS
0.29%
Oracle

Original NVD Description

Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GoldenGate accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Related CVEs

Other vulnerabilities affecting the same vendor(s)