HIGH

CVE-2026-87351

Oracle Corporation — Oracle GoldenGate

Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS8.8

EPSS0.4%

Exploit StatusNot Assessed

PublishedOct 20, 2026

Last ModifiedOct 23, 2026

VendorOracle Corporation

ProductOracle GoldenGate

Weakness (CWE)CWE-284

View on NVD

Vulnerability Timeline

PublishedOct 20, 2026

Last ModifiedOct 23, 2026

Seraph Context

Technology Watch Match

Available for technologies you monitor inside Seraph CTI.

Relevant Threat Actors

Surfaced automatically when a documented actor is linked to this CVE.

Sector Context

Shown when this vendor/product is relevant to your industry.

Exploitation Context

Campaign and indicator context, where Seraph analysts have published it.

References

https://www.oracle.com/security-alerts/cpuoct2026.html

More from Oracle Corporation in the catalogue.

CVE-2026-114820Oracle Java SEPublished Oct 24, 2026 CVE-2026-91403Oracle Java SEPublished Oct 21, 2026 CVE-2026-91668Oracle Data IntegratorPublished Oct 20, 2026

Does this affect technology you run?

Declare your technology stack inside Seraph CTI and get notified the moment a vulnerability matches it.

Explore Seraph CTI Back to Vulnerability Catalogue