Vulnerabilities
Oracle Database Server Hit by Multi‑Vulnerability Storm: Remote Code Execution & DoS
A wave of critical flaws in Oracle Database Server—spanning 19.3 through 23.26.3—enables attackers to launch remote code execution and denial‑of‑service attacks. The vulnerabilities, catalogued under CVE‑2026‑83088 to CVE‑2026‑83351, affect all major releases from 19.3 to 23.26.3. Oracle has released patches in the 15 September 2026 security bulletin. Immediate patching is mandatory for any exposed database instances. CERT‑FR has issued an alert urging rapid remediation.
Oracle Database Server is under fire. A bundle of vulnerabilities discovered in mid‑September 2026 lets an attacker execute arbitrary code and crash the database from a remote location. The flaw set covers every major release from 19.3 up to 23.26.3.
What’s at stake?
- Remote code execution (RCE) – full control of the database host.
- Remote denial‑of‑service (DoS) – disrupt availability of critical services.
- Potential pivot to other assets if the database is part of a larger infrastructure.
Affected versions
- 19.3 – 19.32
- 21.3 – 21.23
- 23.4.0 – 23.26.3
Patch status
- Oracle released a comprehensive security patch set on 15 September 2026.
- All affected releases have a corresponding fix available in the official Oracle security bulletin.
- Apply the patches immediately; failure to do so leaves systems open to exploitation.
Key CVEs
- CVE‑2026‑83088
- CVE‑2026‑83156
- CVE‑2026‑83160
- CVE‑2026‑83271
- CVE‑2026‑83272
- CVE‑2026‑83333
- CVE‑2026‑83347
- CVE‑2026‑83348
- CVE‑2026‑83349
- CVE‑2026‑83350
- CVE‑2026‑83351
Action items
- Verify if your environment runs any of the affected Oracle Database versions.
- Download and deploy the latest patch from Oracle’s security bulletin.
- Re‑validate the database after patching to ensure functionality and security.
- Monitor logs for any suspicious activity that might indicate exploitation attempts.
"The rapid release of these patches underscores Oracle’s commitment to security, but it also highlights the need for vigilant patch management in production environments." – CERT‑FR advisory.
Related vulnerabilities
MongoDB Faces Multi‑Vector Exploits: DoS, Data Breach & Integrity Hits Across Drivers & Server
CERT‑FR has issued a critical alert on September 14, 2026 after discovering a suite of vulnerabilities in MongoDB that span the core server and a wide range of drivers (C, C#, C++, Go, Java, PHP, Python, Ruby, Rust). The flaws allow attackers to trigger remote denial‑of‑service, leak sensitive data, and tamper with database contents. All versions prior to the listed releases are affected. Immediate patching and configuration hardening are mandatory.
Read briefing
Ivanti Connect Secure & Policy Secure Gateways Hit by Multi‑Vulnerability Surge – Patch Now
A wave of critical flaws—CVE‑2024‑22024, CVE‑2024‑21888, CVE‑2024‑21893, CVE‑2023‑46805, CVE‑2024‑21887—has been actively exploited against Ivanti Connect Secure and Policy Secure Gateways. The bugs enable unauthenticated privilege escalation, SSRF, and remote code execution, letting attackers hijack devices and steal credentials. Ivanti released patches for most affected versions in February, with additional fixes rolled out through March. Immediate patching, re‑authentication, and hardened configuration are essential to stop attackers from leveraging these weaknesses.
Read briefing
StrongSwan Remote DoS Vulnerability (CVE‑2026‑78123) – Immediate Patching Required
A critical remote denial‑of‑service flaw has been discovered in StrongSwan VPN software, identified as CVE‑2026‑78123. The vulnerability allows attackers to crash the daemon on any system running a version older than 6.1.0, potentially taking networks offline. It is triggered by malformed IKE packets and can be mitigated by applying the vendor‑released patch. All affected deployments should update immediately.
Read briefing
Microsoft Edge Hit by Multi‑Vulnerability Storm; CVE‑2026‑87491 Under Active Exploitation
A wave of security flaws has been uncovered in Microsoft Edge, enabling attackers to bypass security policies and trigger unspecified critical issues. The most urgent flaw, CVE‑2026‑87491, is already being exploited in the wild. Versions prior to 151.0.4129.107 and 152.0.4191.66 are affected. Microsoft has issued a series of security bulletins; users must apply the latest patches immediately to close the gaps.
Read briefing