CVE-2026-70715

HighCVSS 8.8

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

Summary

Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. Easily exploitable, allows an unauthenticated attacker with physical access to the communication segment to take over Oracle Autonomous Health Framework.

Risk Assessment

Risk of complete takeover of Oracle Autonomous Health Framework, potentially leading to compromise of confidentiality, integrity, and availability.

Recommendation

Apply Oracle patches for affected versions. Restrict physical access to infrastructure and communication segments.

Original NVD description (English source)

Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. Successful attacks of this vulnerability can result in takeover of Oracle Autonomous Health Framework. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).