CVE-2026-101501

Awaiting Analysis Awaiting Analysis - Queue

Oracle Trusted Answer Search PLSQL Package Vulnerability

Publication date: 2026-10-20

Last updated on: 2026-11-05

Assigner: Oracle

Description

Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. While the vulnerability is in Oracle Trusted Answer Search, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Trusted Answer Search accessible data as well as unauthorized read access to a subset of Oracle Trusted Answer Search accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Trusted Answer Search. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-05

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101501

EUVD

EUVD-2026-105916

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	Oracle Trusted Answer Search	26.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Trusted Answer Search (PLSQL package) affecting version 26.1. It allows a low-privileged attacker with network access to compromise the system. Successful exploitation can lead to unauthorized data creation, deletion, or modification, unauthorized data access, and denial-of-service conditions.

Detection Guidance

This vulnerability affects Oracle Trusted Answer Search (component: PLSQL package) in version 26.1. Detection requires checking for Oracle software versions and network-exposed Oracle Net services. No specific commands are provided in the context, but monitoring for unauthorized data access or system crashes in Oracle Trusted Answer Search may indicate exploitation.

Impact Analysis

An attacker could gain unauthorized access to critical data, modify or delete sensitive information, or cause the system to crash repeatedly. This could disrupt operations and lead to data breaches or loss of service.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's data protection principles and HIPAA's security requirements. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Trusted Answer Search version 26.1. Restrict network access to Oracle Net for low privileged users. Monitor for unusual data access or modification patterns in Oracle Trusted Answer Search.

Hi! I’m here to help you understand CVE-2026-101501. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...