CVE-2026-71130

HighCVSS 8.2

Published: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. An unauthenticated attacker with network access via RDP can exploit this, potentially leading to unauthorized access to critical data and data modification.

Risk Assessment

Risk includes breach of data confidentiality and integrity, including access to all data accessible in Oracle VM VirtualBox.

Recommendation

Restrict RDP access to trusted networks and apply vendor patches.

Original NVD description (English source)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).