CVE-2026-101484
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Vulnerability in Oracle Secure Backup (Backup and Restore component) affecting versions 19.1.0.0.0 and 19.1.0.1.0. An unauthenticated attacker with network access via TCP can easily compromise the system. CVSS 9.8.
Risk Assessment
Very high risk — compromise of the backup system can lead to data loss or leakage and further network escalation.
Recommendation
Immediately apply Oracle patches for Secure Backup and restrict TCP access to the service.
Other vulnerabilities in Oracle Secure Backup
See all- CVE-2026-101483Medium
Vulnerability in Oracle Secure Backup (component: Device Management and Support) affecting versions 19.1.0.0.0 and 19.1.0.1.0. A low-privileged attacker with logon to the infrastructure where the component executes can cause a hang or frequently repeatable crash (complete denial of service), and the attack may impact additional products.
- CVE-2026-101480Medium
Vulnerability in Oracle Secure Backup (component: NDMP daemon). An unauthenticated attacker with network access via TCP can easily exploit this vulnerability, resulting in unauthorized read access to a subset of Oracle Secure Backup accessible data.
- CVE-2026-101479High
Vulnerability in Oracle Secure Backup (Backup and Restore component) versions 19.1.0.0.0 and 19.1.0.1.0. An easily exploitable TCP network attack by an unauthenticated attacker can cause a hang or frequently repeatable crash (complete DoS) of Oracle Secure Backup.
- CVE-2026-101482High
Vulnerability in Oracle Secure Backup (Device Management and Support component) versions 19.1.0.0.0 and 19.1.0.1.0. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Secure Backup.
- CVE-2026-101481High
Vulnerability in Oracle Secure Backup (Device Management and Support component) versions 19.1.0.0.0 and 19.1.0.1.0. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Secure Backup and impact additional products (scope change).
Original NVD description (English source)
Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS