Oracle APEX vulnerabilities

3 known CVE vulnerabilities in Oracle APEX, translated and rated.

CVE-2026-101521Critical
Vulnerability in Oracle APEX (component: General) affecting versions 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. An unauthenticated attacker with HTTPS network access can easily exploit it to take over Oracle APEX. CVSS 3.1 Base Score is 9.8.
CVE-2026-60630Medium
A vulnerability in Oracle APEX allows a low-privileged attacker with local access to gain complete access to all APEX data.
CVE-2026-60156Medium
Vulnerability in Oracle APEX (General). An unauthenticated attacker via HTTP can read a subset of data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS