Back to overview

CVE-2026-61174

CRITICAL

9.0

CVSS 3.1

Metadata

CVE ID: CVE-2026-61174
State: PUBLISHED
Assigner: oracle
Reserved: 2026-07-08 15:52 UTC
Published: 2026-07-21 21:38 UTC
Last updated: 2026-07-21 21:38 UTC
Vendor / Product: Oracle Corporation / Oracle Product Lifecycle Analytics
Sources: cve.org · NVD

Severity & Metrics

9.0 CRITICAL CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected products (1)

Vendor	Product	Platform	Versions
Oracle Corporation	Oracle Product Lifecycle Analytics	—	3.6.1

Weakness (CWE)

CWE	Source	Description
—	cna	Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes to compromise Oracle Product Lifecycle Analytics. While the vulnerability is in Oracle Product Lifecycle Analytics, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Lifecycle Analytics accessi

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.0	CRITICAL	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

References (1)

Oracle Advisory https://www.oracle.com/security-alerts/cpujul2026.html

Back to overview