# Multiple vulnerabilities in Oracle Database Server

Published: 2026-07-23 · Severity: elevated · Sectors: financial-services, government-national, healthcare, technology
Canonical: https://vorant.io/reports/b545ad58-42b3-5ea2-8e04-52d7e3939550/multiple-vulnerabilities-in-oracle-database-server

> Multiple flaws in Oracle Database Server versions 19–23 enable remote denial of service, data theft, and integrity compromise.

CERT-FR has published an advisory covering multiple vulnerabilities affecting Oracle Database Server and Oracle Net Services across supported versions: 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The flaws enable attackers to cause remote denial of service, compromise data confidentiality, and tamper with data integrity. The advisory references 40 distinct CVE identifiers published in Oracle's July 2026 Critical Patch Update bulletin. Defenders operating any affected Oracle Database Server or Net Services version should apply patches from Oracle's security advisory without delay. The article does not indicate whether these vulnerabilities are actively exploited in the wild, but the scale and severity of the update warrants immediate patch prioritization.

## Mentioned in this report

- Vulnerabilities: CVE-2025-7962, CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-31789, CVE-2026-31790, CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-46975, CVE-2026-47038, CVE-2026-47039, CVE-2026-47040, CVE-2026-47045, CVE-2026-47046, CVE-2026-47060, CVE-2026-47061, CVE-2026-4738, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518, CVE-2026-60175, CVE-2026-61211, CVE-2026-7383, CVE-2026-9076

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0914

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/b545ad58-42b3-5ea2-8e04-52d7e3939550/multiple-vulnerabilities-in-oracle-database-server.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup