CVE-2026-21999 | Oracle Database Server up to 23.26.1 XML Database improper authorization

A vulnerability classified as critical was found in Oracle Database Server up to 23.26.1. Affected by this vulnerability is an unknown functionality of the component XML Database Component. Executing a manipulation can lead to improper authorization.

This vulnerability is handled as CVE-2026-21999. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.