A vulnerability identified as critical has been detected in Oracle Hospitality OPERA 5 5.6.19.23/5.6.25.17/5.6.26.10/5.6.27.4. Affected by this issue is some unknown functionality of the component Opera Servlet. Performing a manipulation results in Remote Code Execution.

This vulnerability is reported as CVE-2026-21967. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.