CVE-2026-60411
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Vulnerability in Oracle TimesTen In-Memory Database (ttcserver component) version 26.1.1.1.0. An unauthenticated attacker with access to the physical communication segment can cause a hang or frequent crash (complete DOS) of the database.
Risk Assessment
An attacker can completely disable the TimesTen database, leading to downtime for critical business applications.
Recommendation
Apply the Oracle patch for version 26.1.1.1.0 or later as soon as available. Restrict physical access to the network segment where TimesTen runs.
Other vulnerabilities in Oracle TimesTen In-Memory Database
See all- CVE-2026-60402Critical
Vulnerability in Oracle TimesTen In-Memory Database (Kubernetes Operator component) allows a low-privileged attacker with network access via HTTPS to take over the database. Attacks may impact additional products (scope change).
- CVE-2026-60407Medium
Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. It is difficult to exploit, requires local access and low privileges. Successful attack can lead to unauthorized access to critical data or full access to all database data.
Original NVD description (English source)
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: ttcserver). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the TimesTen In-Memory Database executes to compromise TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of TimesTen In-Memory Database. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).