CVE-2026-101479

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in Oracle Secure Backup

Publication date: 2026-10-20

Last updated on: 2026-11-05

Assigner: Oracle

Description

Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Secure Backup. CVSS 3.1 Base Score 8.6 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-05

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-09

NVD

CVE-2026-101479

EUVD

EUVD-2026-105895

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	Oracle Secure Backup	19.1.0.0.0
Oracle Corporation	Oracle Secure Backup	19.1.0.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0. It allows an unauthenticated attacker with network access to cause a denial of service (DOS) by crashing the system repeatedly or making it hang. The attack does not require user interaction or special privileges.

Detection Guidance

Detecting this vulnerability requires checking for Oracle Secure Backup versions 19.1.0.0.0 or 19.1.0.1.0 running on your system. Use commands like 'rpm -qa | grep oracle' or 'dpkg -l | grep oracle' to list installed Oracle packages. Verify the version with 'obtool --version' or check running processes with 'ps aux | grep ob'.

Impact Analysis

If exploited, this vulnerability can cause Oracle Secure Backup to crash or become unresponsive, disrupting backup and restore operations. This may lead to data loss or inability to recover critical systems, impacting business continuity.

Compliance Impact

This vulnerability causes denial-of-service (DoS) conditions in Oracle Secure Backup, which could disrupt data backup and recovery processes. Such disruptions may impact compliance with GDPR (data availability) and HIPAA (data integrity and availability) by preventing timely backups or causing data loss.

Mitigation Strategies

Apply the latest Oracle Secure Backup patch immediately. If patching is not possible, restrict network access to the Oracle Secure Backup ports (default TCP 10000) using firewalls. Disable the service if not in use with 'systemctl stop ob' and 'systemctl disable ob'.

Hi! I’m here to help you understand CVE-2026-101479. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...