Medium WID-SEC-2026-4093 4 CVEs

Oracle TimesTen In-Memory Database: Mehrere Schwachstellen

Published Oct 20, 2026 · Updated Oct 20, 2026 · de-DE

Vendor: Oracle Product: TimesTen In-Memory Database Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Oracle TimesTen In-Memory Database ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Oracle Datenbank ist ein weit verbreitetes relationales Datenbanksystem.

Vulnerabilities 4

High 7.8

CVE-2026-39822

Root escape via symlink plus trailing slash in os

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even whe…

Go standard library os katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Jul 8, 2026
Medium 5.5

CVE-2026-101522

Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected ar…

Oracle Oracle TimesTen In-Memory Database

Oct 20, 2026
Medium 4.3

CVE-2026-87354

Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator). Supported versions that are affec…

Oracle Oracle TimesTen In-Memory Database

Oct 20, 2026
Low 3.6

CVE-2026-101600

Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected ar…

Oracle Oracle TimesTen In-Memory Database

Oct 20, 2026

Revision history

2026-10-20 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - October 2026 - Appendix Oracle TimesTen In-Memory Database vom 2026-10-20
https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixXTEN