CVE-2026-61224
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Vulnerability in Oracle Communications Converged Application Server version 8.3. Difficult to exploit, allows a high-privileged attacker with network access via TLS to take over the server and impact additional products.
Risk Assessment
Risk of complete takeover of the communications server, potentially leading to service disruptions and data confidentiality breaches.
Recommendation
Apply the Oracle security patch for Oracle Communications Converged Application Server version 8.3.
Other vulnerabilities in Oracle Communications Converged Application Server
See all- CVE-2026-61223Critical
Vulnerability in Oracle Communications Converged Application Server allows an unauthenticated attacker via TCP/IP to take over the server. Exploitation is difficult but may affect other products.
- CVE-2026-61226High
A vulnerability in Oracle Communications Converged Application Server (RTP Proxy component) version 8.3. Difficult to exploit, requires logon to infrastructure and high privileges. Successful attack can lead to server takeover and impact other products (scope change). CVSS 7.5.
- CVE-2026-61225High
Vulnerability in Oracle Communications Converged Application Server (Core component) versions 8.2 and 8.3. Difficult to exploit, allows an unauthenticated attacker with network access via TCP/IP to take over the server.
Original NVD description (English source)
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). The supported version that is affected is 8.3. Difficult to exploit vulnerability allows high privileged attacker with network access via TLS to compromise Oracle Communications Converged Application Server. While the vulnerability is in Oracle Communications Converged Application Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Communications Converged Application Server. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).