← Back

CVE-2026-70734

nvd nist
Published: Aug 18, 2026Modified: Aug 26, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H
Exploitability: 1.1 / Impact: 5.8
Source: secalert_us@oracle.com (Secondary)

Description

Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Autonomous Health Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Autonomous Health Framework accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Autonomous Health Framework. CVSS 3.1 Base Score 7.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H).

Affected (5)

1 product
Autonomous Health Framework
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
From 26.0.0 to 26.1.0
Version 26.2.0
Version 26.3.1
Version 26.5.0
Version 26.5.2

References (1)

Source: secalert_us@oracle.com
Vendor Advisory

Timeline

No history available yet.