CVE-2026-46876

Analyzed Analyzed - Analysis Complete

Oracle Application Testing Suite Remote Code Execution

Publication date: 2026-07-21

Last updated on: 2026-07-24

Assigner: Oracle

Description

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-24

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-46876

EUVD

EUVD-2026-46458

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	application_testing_suite	13.3.0.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a critical vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows an unauthenticated attacker with network access to remotely compromise the system. Successful exploitation could lead to complete takeover of the application.

Detection Guidance

This vulnerability affects Oracle Application Testing Suite version 13.3.0.1 and allows unauthenticated network access attacks. Detection should focus on identifying vulnerable instances of this software on your network. Check for Oracle Application Testing Suite version 13.3.0.1 running on any system. Use network scanning tools to identify hosts running Oracle services on default ports. Verify if the software version matches the affected version.

Impact Analysis

An attacker could gain full control over your Oracle Application Testing Suite, potentially accessing sensitive data, disrupting operations, or using the system to launch further attacks within your network.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or health data, violating GDPR or HIPAA requirements for data protection and confidentiality. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Apply the latest security patches from Oracle for version 13.3.0.1 of Application Testing Suite. Restrict network access to Oracle Net ports and disable unnecessary services. Monitor for unusual activity and ensure firewalls block unauthorized access.

Hi! I’m here to help you understand CVE-2026-46876. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70