CVE-2026-101503

Summary

Oracle Trusted Answer Search has a critical vulnerability in its PLSQL package that allows low-privileged attackers with network access to fully compromise the system, affecting confidentiality, integrity, and availability. This represents a severe risk as it can lead to complete system takeover.

Exploitability

The vulnerability is easily exploitable requiring only low privilege access via Oracle Net with minimal preconditions, making it highly attractive to attackers.

Blast radius

Successful exploitation could compromise Oracle Trusted Answer Search and potentially impact additional products due to the scope change, leading to widespread data breaches and service disruptions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle Trusted Answer Search 26.1 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.