CVE-2026-101477
HighCVSS 7.8Summary
Vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer component) versions 26.3-26.8. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Autonomous Health Framework.
Risk Assessment
A successful attack can result in takeover of Oracle Autonomous Health Framework, impacting confidentiality, integrity, and availability.
Recommendation
Update Oracle Autonomous Health Framework to the latest version and restrict local privileges on the infrastructure.
Other vulnerabilities in Oracle Autonomous Health Framework
See all- CVE-2026-101485Medium
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affecting versions 26.3-26.8. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or all accessible data, and the attack may impact additional products.
- CVE-2026-101478High
Vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer component) versions 26.3-26.8. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Autonomous Health Framework.
- CVE-2026-101452High
Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay) affects versions 26.3-26.8. A low-privileged attacker with logon to the infrastructure can compromise the framework.
- CVE-2026-70734High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A high-privileged attacker with local access can exploit it with user interaction, potentially leading to unauthorized data modification and complete denial of service.
- CVE-2026-70731High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A low-privileged attacker with local access can compromise integrity and availability, with scope change affecting other products.
- CVE-2026-70728High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A low-privileged attacker can gain full data access and modify some data over HTTP, with scope change.
- CVE-2026-70717High
Vulnerability in Oracle Autonomous Health Framework (component: Cluster Health Analyzer). Affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. Difficult to exploit, allows a low-privileged attacker with physical access to the communication segment to gain unauthorized access and modify data.
- CVE-2026-70715High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. Easily exploitable, allows an unauthenticated attacker with physical access to the communication segment to take over Oracle Autonomous Health Framework.
- CVE-2026-60172Medium
Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform) affects versions 26.0.0, 26.1.0, and 26.2.0. A high-privileged attacker with local access, requiring user interaction, can take over the framework. Exploitation is difficult.
Original NVD description (English source)
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. Successful attacks of this vulnerability can result in takeover of Oracle Autonomous Health Framework. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS