CVE-2026-60400 Oracle CVE debrief

Who should care

Oracle GoldenGate administrators, security teams, and IT professionals responsible for Oracle products should be aware of this vulnerability and take necessary actions to protect their systems. This includes reviewing and applying security patches, restricting network access, and monitoring for suspicious activity. The vulnerability's high severity and potential for system takeover necessitate prompt attention from those responsible for Oracle GoldenGate installations and overall security posture within their organizations.

Technical summary

The CVE-2026-60400 vulnerability in Oracle GoldenGate's Admin Server Executable has a CVSS 3.1 Base Score of 8.8, indicating high severity. Low-privileged attackers with network access via HTTPS can compromise Oracle GoldenGate, potentially leading to a takeover. Affected versions are 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. The vulnerability allows for easy exploitation, emphasizing the need for immediate patching and defensive measures.

Defensive priority

Oracle GoldenGate vulnerability allows low-privileged attackers to compromise the system via HTTPS, leading to potential takeover.

Recommended defensive actions

• Review and apply Oracle's security patches for affected Oracle GoldenGate versions.
• Restrict network access to Oracle GoldenGate Admin Server Executable.
• Monitor for suspicious activity and implement compensating controls.
• Verify inventory of Oracle GoldenGate installations and their versions.
• Consider implementing additional security measures for low-privileged accounts.

Evidence notes

The CVE-2026-60400 vulnerability affects Oracle GoldenGate versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. It allows low-privileged attackers with network access via HTTPS to compromise Oracle GoldenGate, potentially leading to a takeover. The CVSS 3.1 Base Score is 8.8, indicating high severity.

Official resources