SEPTEMBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-61143

MEDIUM · CVSS 6.4 EPSS 0.23% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Oracle Communications Convergent Charging Controller, specifically versions 15.0.0.0.0 and 15.2.0.0.0, allowing a high-privileged attacker with network access to potentially take over the system, contingent upon human interaction. Organizations using these affected versions should prioritize remediation efforts, as successful exploitation could compromise confidentiality, integrity, and availability of their communications infrastructure.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-61143
Severity
MEDIUM
CVSS
6.4
EPSS
0.23%
Oracle

Original NVD Description

Vulnerability in the Oracle Communications Convergent Charging Controller product of Oracle Communications (component: Prov IF). Supported versions that are affected are 15.0.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Convergent Charging Controller. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Communications Convergent Charging Controller. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

Related CVEs

Other vulnerabilities affecting the same vendor(s)