CVE-2026-83088

Received Received - Intake

RDBMS Denial of Service in Oracle Database Server

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise RDBMS. While the vulnerability is in RDBMS, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of RDBMS. CVSS 3.1 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83088

EUVD

EUVD-2026-79416

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	database_server	From 23.4.0 (inc) to 23.26.3 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in the RDBMS component of Oracle Database Server affecting versions 23.4.0 to 23.26.3. It allows a low-privileged authenticated attacker with network access to cause a denial of service (DOS) by hanging or crashing the RDBMS repeatedly.

Detection Guidance

Detection requires checking Oracle Database Server versions affected by CVE-2026-83088. Verify if your Oracle Database Server version is between 23.4.0 and 23.26.3. Use SQL queries like SELECT * FROM v$version to check the version.

Impact Analysis

An attacker could exploit this to make the database unavailable, disrupting operations that rely on it. This could lead to downtime, data unavailability, and potential loss of service for applications using the database.

Compliance Impact

This vulnerability could impact compliance by causing unplanned downtime or data unavailability, which may violate availability requirements in regulations like GDPR or HIPAA. Downtime could also lead to data breaches if exploited during maintenance or backup operations.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update (CPU) to upgrade to a non-vulnerable version of Oracle Database Server. Monitor Oracle security advisories for patches. Ensure network access controls restrict unauthorized users.

Hi! I’m here to help you understand CVE-2026-83088. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70