CVE-2026-61225
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Vulnerability in Oracle Communications Converged Application Server (Core component) versions 8.2 and 8.3. Difficult to exploit, allows an unauthenticated attacker with network access via TCP/IP to take over the server.
Risk Assessment
Successful attack can lead to full takeover of the converged application server, compromising confidentiality, integrity, and availability of data.
Recommendation
Apply patches provided by Oracle for versions 8.2 and 8.3 immediately and restrict network access to the server.
Other vulnerabilities in Oracle Communications Converged Application Server
See all- CVE-2026-61223Critical
Vulnerability in Oracle Communications Converged Application Server allows an unauthenticated attacker via TCP/IP to take over the server. Exploitation is difficult but may affect other products.
- CVE-2026-61226High
A vulnerability in Oracle Communications Converged Application Server (RTP Proxy component) version 8.3. Difficult to exploit, requires logon to infrastructure and high privileges. Successful attack can lead to server takeover and impact other products (scope change). CVSS 7.5.
- CVE-2026-61224High
Vulnerability in Oracle Communications Converged Application Server version 8.3. Difficult to exploit, allows a high-privileged attacker with network access via TLS to take over the server and impact additional products.
Original NVD description (English source)
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP/IP to compromise Oracle Communications Converged Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Communications Converged Application Server. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).