CVE-2026-34311
Unauthenticated Remote Code Execution in Oracle Hospitality OPERA 5 Property Services
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: Oracle
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| oracle | hospitality_opera_5_property_services | 5.6.19.24 |
| oracle | hospitality_opera_5_property_services | 5.6.22 |
| oracle | hospitality_opera_5_property_services | 5.6.25.19 |
| oracle | hospitality_opera_5_property_services | 5.6.27.6 |
| oracle | hospitality_opera_5_property_services | 5.6.28 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Oracle Hospitality OPERA 5 Property Services product, specifically affecting certain supported versions. It is an easily exploitable flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system.
A successful attack can lead to a complete takeover of the Oracle Hospitality OPERA 5 Property Services, impacting confidentiality, integrity, and availability of the system.
How can this vulnerability impact me? :
If exploited, this vulnerability can allow an attacker to take full control over the Oracle Hospitality OPERA 5 Property Services. This means the attacker could access sensitive data, alter or destroy information, and disrupt the availability of the service.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability allows an unauthenticated attacker with network access to fully compromise Oracle Hospitality OPERA 5 Property Services, impacting confidentiality, integrity, and availability.
Such a compromise could lead to unauthorized access to sensitive data, which may result in violations of data protection regulations such as GDPR and HIPAA that require safeguarding personal and health information.
Therefore, organizations using the affected versions of Oracle Hospitality OPERA 5 Property Services may face compliance risks if this vulnerability is exploited.