CVE-2026-61175
A critical vulnerability exists in the Oracle Product Lifecycle Analytics product within Oracle Supply Chain. An attacker can exploit this flaw via a network connection to gain unauthorized access to sensitive information.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users running Oracle Product Lifecycle Analytics version 3.6.1.
Real-world impact
An attacker could gain complete access to all data accessible by the software, potentially exposing critical information. They could also cause a partial denial of service, making the system partially unavailable to legitimate users.
Why this severity
The score is critical because the vulnerability is easy to exploit remotely without needing any login credentials, and it can lead to a total loss of data confidentiality.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources