Skip to content
Threat Feed

Product

REST Data Services (Core)

1 brief RSS
high advisory

CVE-2026-35277: Oracle REST Data Services Vulnerability Allows Unauthorized Data Access

CVE-2026-35277 is a vulnerability in Oracle REST Data Services (Core) versions 24.2.0 to 26.1.0 that allows a low-privileged attacker with network access via HTTPS to compromise the system, leading to unauthorized data access, creation, deletion, or modification.

REST Data Services cve oracle data breach
2r 1c