Privilege escalation in Oracle Timesten In-Memory Database
CVE-2026-60406
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen In-Memory Database executes to compromise TimesTen In-Memory Database. Successful attacks of this vulnerability can result in takeover of TimesTen In-Memory Database. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Vulnerability class: Privilege Escalation
EPSS: 0.002 (7.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Oracle Timesten_in-memory_database — versions 26.1.1.1.0
- Oracle Corporation Timesten In-memory Database — versions 26.1.1.1.0
Weakness classification (CWE)
References
- secalert_us@oracle.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-60406?
- CVE-2026-60406 is a medium-severity vulnerability in Oracle Timesten In-Memory Database, classified under Improper Privilege Management. CVSS score: 6.7/10. Published 2026-07-21.
- How severe is CVE-2026-60406?
- Medium severity. CVSS v3 base score is 6.7 out of 10.