{"id":"CVE-2026-101484","published":"2026-10-20T22:17:57.507","lastModified":"2026-10-22T23:17:58.793","description":"Vulnerability in Oracle Secure Backup (component: Backup and Restore).  Supported versions that are affected are 19.1.0.0.0 and   19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup.  Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287","CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Oracle Secure Backup is vulnerable to unauthenticated remote code execution due to a flaw in its backup and restore component that allows attackers to fully compromise the system without needing credentials. This critical vulnerability affects versions 19.1.0.0.0 and 19.1.0.1.0.","exploitability":"The vulnerability is easily exploitable with no authentication required, allowing remote attackers with TCP network access to take full control of Oracle Secure Backup systems.","blast_radius":"If exploited, this vulnerability could lead to complete compromise of backup infrastructure, potentially exposing sensitive data and disrupting business continuity operations across affected organizations.","remediation":"Upgrade to Oracle Secure Backup version 19.1.0.2.0 or later to remediate this critical vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","backup","oracle","network"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:23:44.912Z"}}