CVE-2026-101477

Awaiting Analysis Awaiting Analysis - Queue

Oracle Autonomous Health Framework Privilege Escalation

Publication date: 2026-10-20

Last updated on: 2026-11-08

Assigner: Oracle

Description

Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. Successful attacks of this vulnerability can result in takeover of Oracle Autonomous Health Framework. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-08

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101477

EUVD

EUVD-2026-105893

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	Oracle Autonomous Health Framework	26.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer) affecting versions 26.3 to 26.8. A low-privileged attacker with logon access can exploit it to take over the framework. The CVSS score is 7.8, indicating high impacts on confidentiality, integrity, and availability.

Detection Guidance

Detection requires checking for vulnerable versions of Oracle Autonomous Health Framework (26.3-26.8). Review installed components and logs for unauthorized access or modifications to the Trace File Analyzer. No specific commands are provided in the context.

Impact Analysis

An attacker could gain control of the Oracle Autonomous Health Framework, potentially accessing sensitive data, altering system operations, or disrupting services. This could lead to data breaches, system downtime, or unauthorized changes.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR (data protection) and HIPAA (health data privacy). Organizations may face legal penalties, fines, or reputational damage due to non-compliance.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Autonomous Health Framework versions 26.3-26.8. Restrict user privileges to minimize access to the infrastructure where the framework executes. Monitor for unauthorized changes or activities in the framework.

Hi! I’m here to help you understand CVE-2026-101477. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...