{"id":"CVE-2026-101503","published":"2026-10-20T22:17:59.557","lastModified":"2026-10-21T14:29:49.513","description":"Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).   The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search.  While the vulnerability is in Oracle Trusted Answer Search, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle Trusted Answer Search. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Oracle Trusted Answer Search has a critical vulnerability in its PLSQL package that allows low-privileged attackers with network access to fully compromise the system, affecting confidentiality, integrity, and availability. This represents a severe risk as it can lead to complete system takeover.","exploitability":"The vulnerability is easily exploitable requiring only low privilege access via Oracle Net with minimal preconditions, making it highly attractive to attackers.","blast_radius":"Successful exploitation could compromise Oracle Trusted Answer Search and potentially impact additional products due to the scope change, leading to widespread data breaches and service disruptions.","remediation":"Upgrade to Oracle Trusted Answer Search 26.1 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["database","plsql","privilege-escalation","rce","oracle"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:20:16.822Z"}}