CVE-2026-35253 MEDIUM

CVE-2026-35253

Vendor Oracle Corporation
Product Oracle Macaron Tool of Oracle Open Source Projects
Published May 6, 2026
Last update May 10, 2026
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected is v0.22.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Macaron Tool. Successful attacks of this vulnerability can result in Oracle Macaron Tool failing host address validation.

Key dates

02Disclosure timeline

May 6, 2026 CVE published
May 10, 2026 Record updated