CVE-2026-70715
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. Easily exploitable, allows an unauthenticated attacker with physical access to the communication segment to take over Oracle Autonomous Health Framework.
Risk Assessment
Risk of complete takeover of Oracle Autonomous Health Framework, potentially leading to compromise of confidentiality, integrity, and availability.
Recommendation
Apply Oracle patches for affected versions. Restrict physical access to infrastructure and communication segments.
Other vulnerabilities in Oracle Autonomous Health Framework
See all- CVE-2026-70734High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A high-privileged attacker with local access can exploit it with user interaction, potentially leading to unauthorized data modification and complete denial of service.
- CVE-2026-70731High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A low-privileged attacker with local access can compromise integrity and availability, with scope change affecting other products.
- CVE-2026-70728High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A low-privileged attacker can gain full data access and modify some data over HTTP, with scope change.
- CVE-2026-70717High
Vulnerability in Oracle Autonomous Health Framework (component: Cluster Health Analyzer). Affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. Difficult to exploit, allows a low-privileged attacker with physical access to the communication segment to gain unauthorized access and modify data.
- CVE-2026-60172Medium
Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform) affects versions 26.0.0, 26.1.0, and 26.2.0. A high-privileged attacker with local access, requiring user interaction, can take over the framework. Exploitation is difficult.
Original NVD description (English source)
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. Successful attacks of this vulnerability can result in takeover of Oracle Autonomous Health Framework. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS