{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Oracle. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp" } }, "lang": "en", "publisher": { "category": "vendor", "name": "Oracle", "namespace": "https://www.oracle.com" }, "references": [ { "summary": "URL to html version of Advisory", "url": "https://www.oracle.com/security-alerts/alert-cve-2026-109618.html" }, { "category": "self", "summary": "Canonical URL for this CSAF document.", "url": "https://www.oracle.com/docs/tech/security-alerts/cve-2026-109618csaf.json" } ], "title": "Oracle Security Alert for CVE-2026-109618 - Oracle CSAF", "tracking": { "current_release_date": "2026-10-25T13:00:00-07:00", "id": "cve-2026-109618csaf", "initial_release_date": "2026-10-25T13:00:00-07:00", "revision_history": [ { "date": "T-07:00", "number": "***TBD***", "summary": "Initial Release" } ], "status": "final", "version": "1.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "Oracle Communications Diameter Signaling Router Version 8.6.0", "product": { "name": "Oracle Communications Diameter Signaling Router Version 8.6.0", "product_id": "P-10899V-8.6.0", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.6.0:*:*:*:*:*:*:*" } } }, { "category": "product_version", "name": "Oracle Communications Diameter Signaling Router Version 9.0.0", "product": { "name": "Oracle Communications Diameter Signaling Router Version 9.0.0", "product_id": "P-10899V-9.0.0", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_diameter_signaling_router:9.0.0:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Communications Diameter Signaling Router" }, { "branches": [ { "category": "product_version", "name": "Oracle Communications EAGLE Application Processor Version 17.0", "product": { "name": "Oracle Communications EAGLE Application Processor Version 17.0", "product_id": "P-11122V-17.0", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_application_processor:17.0:*:*:*:*:*:*:*" } } }, { "category": "product_version", "name": "Oracle Communications EAGLE Application Processor Version 17.1", "product": { "name": "Oracle Communications EAGLE Application Processor Version 17.1", "product_id": "P-11122V-17.1", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_application_processor:17.1:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Communications EAGLE Application Processor" }, { "branches": [ { "category": "product_version", "name": "Oracle Communications EAGLE Element Management System Version 47.0", "product": { "name": "Oracle Communications EAGLE Element Management System Version 47.0", "product_id": "P-11125V-47.0", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_element_management_system:47.0:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Communications EAGLE Element Management System" }, { "branches": [ { "category": "product_version", "name": "Oracle Communications EAGLE LNP Application Processor Version 11.1", "product": { "name": "Oracle Communications EAGLE LNP Application Processor Version 11.1", "product_id": "P-11118V-11.1", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:11.1:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Communications EAGLE LNP Application Processor" }, { "branches": [ { "category": "product_version", "name": "Oracle Communications LSMS Version 14.0", "product": { "name": "Oracle Communications LSMS Version 14.0", "product_id": "P-11114V-14.0", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_lsms:14.0:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Communications LSMS" }, { "branches": [ { "category": "product_version", "name": "Oracle Communications Performance Intelligence Center (PIC) Software Version 10.4", "product": { "name": "Oracle Communications Performance Intelligence Center (PIC) Software Version 10.4", "product_id": "P-11044V-10.4", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4:*:*:*:*:*:*:*" } } }, { "category": "product_version", "name": "Oracle Communications Performance Intelligence Center (PIC) Software Version 10.5", "product": { "name": "Oracle Communications Performance Intelligence Center (PIC) Software Version 10.5", "product_id": "P-11044V-10.5", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_performance_intelligence_center:10.5:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Communications Performance Intelligence Center (PIC) Software" }, { "branches": [ { "category": "product_version_range", "name": "vers:semver/6.1.1-7.0.0", "product": { "name": "Oracle Communications Unified Assurance Version 6.1.1-7.0.0", "product_id": "P-14597V-6.1.1-7.0.0", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_unified_assurance:6.1.1-7.0.0:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Communications Unified Assurance" }, { "branches": [ { "category": "product_version", "name": "Oracle Communications User Data Repository Version 15.0", "product": { "name": "Oracle Communications User Data Repository Version 15.0", "product_id": "P-11108V-15.0", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:communications_user_data_repository:15.0:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Communications User Data Repository" } ], "category": "product_family", "name": "Oracle Communications" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "Oracle Solaris Version 11", "product": { "name": "Oracle Solaris Version 11", "product_id": "P-10006V-11", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:solaris:11:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Solaris" } ], "category": "product_family", "name": "Oracle Systems" } ], "category": "vendor", "name": "Oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-109618", "ids": [ { "system_name": "Oracle Bug ID of Oracle Communications Diameter Signaling Router", "text": "40194980" }, { "system_name": "Oracle Bug ID of Oracle Communications LSMS", "text": "40205808" }, { "system_name": "Oracle Bug ID of Oracle Communications EAGLE Element Management System", "text": "40205792" }, { "system_name": "Oracle Bug ID of Oracle Communications EAGLE LNP Application Processor", "text": "40205807" }, { "system_name": "Oracle Bug ID of Oracle Communications User Data Repository", "text": "40192314" }, { "system_name": "Oracle Bug ID of Oracle Solaris", "text": "40189544" }, { "system_name": "Oracle Bug ID of Oracle Communications Performance Intelligence Center (PIC) Software", "text": "40192844" }, { "system_name": "Oracle Bug ID of Oracle Communications EAGLE Application Processor", "text": "40193825" }, { "system_name": "Oracle Bug ID of Oracle Communications Unified Assurance", "text": "40132636" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Communications Unified Assurance product of Oracle Communications (component: Core (PHP)). Supported versions that are affected are 6.1.1-7.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Unified Assurance. Successful attacks of this vulnerability can result in takeover of Oracle Communications Unified Assurance. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility (PHP)). The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications LSMS product of Oracle Communications (component: Platform (PHP)). The supported version that is affected is 14.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications LSMS. Successful attacks of this vulnerability can result in takeover of Oracle Communications LSMS. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications EAGLE LNP Application Processor product of Oracle Communications (component: Patches (PHP)). The supported version that is affected is 11.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE LNP Application Processor. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE LNP Application Processor. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications EAGLE Element Management System product of Oracle Communications (component: Security (PHP)). The supported version that is affected is 47.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE Element Management System. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE Element Management System. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications Diameter Signaling Router product of Oracle Communications (component: Maintenance (PHP)). Supported versions that are affected are 8.6.0 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Diameter Signaling Router. Successful attacks of this vulnerability can result in takeover of Oracle Communications Diameter Signaling Router. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications EAGLE Application Processor product of Oracle Communications (component: Patches (PHP)). Supported versions that are affected are 17.0 and 17.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE Application Processor. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE Application Processor. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications Performance Intelligence Center (PIC) Software product of Oracle Communications (component: Internal Operations (PHP)). Supported versions that are affected are 10.4 and 10.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Performance Intelligence Center (PIC) Software. Successful attacks of this vulnerability can result in takeover of Oracle Communications Performance Intelligence Center (PIC) Software. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications User Data Repository product of Oracle Communications (component: Security (PHP)). The supported version that is affected is 15.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications User Data Repository. Successful attacks of this vulnerability can result in takeover of Oracle Communications User Data Repository. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Description" } ], "product_status": { "known_affected": [ "P-11125V-47.0", "P-11044V-10.4", "P-11122V-17.1", "P-11122V-17.0", "P-10899V-9.0.0", "P-10006V-11", "P-11118V-11.1", "P-11044V-10.5", "P-11108V-15.0", "P-10899V-8.6.0", "P-11114V-14.0", "P-14597V-6.1.1-7.0.0" ] }, "remediations": [ { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-14597V-6.1.1-7.0.0" ], "url": "https://support.oracle.com/support/?documentId=KB934766" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-10006V-11" ], "url": "https://support.oracle.com/support/?documentId=CPU429" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-11118V-11.1", "P-11114V-14.0", "P-11122V-17.1", "P-11122V-17.0" ], "url": "https://support.oracle.com/support/?documentId=KB935170" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-11125V-47.0" ], "url": "https://support.oracle.com/support/?documentId=KB935079" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-10899V-8.6.0", "P-10899V-9.0.0" ], "url": "https://support.oracle.com/support/?documentId=KB934773" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-11044V-10.4", "P-11044V-10.5" ], "url": "https://support.oracle.com/support/?documentId=KB934954" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-11108V-15.0" ], "url": "https://support.oracle.com/support/?documentId=KB935072" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "P-11125V-47.0", "P-10006V-11", "P-11118V-11.1", "P-11044V-10.4", "P-11044V-10.5", "P-11108V-15.0", "P-10899V-8.6.0", "P-11114V-14.0", "P-11122V-17.1", "P-14597V-6.1.1-7.0.0", "P-11122V-17.0", "P-10899V-9.0.0" ] } ] }, { "cve": "CVE-2026-109619", "ids": [ { "system_name": "Oracle Bug ID of Oracle Communications Diameter Signaling Router", "text": "40194980" }, { "system_name": "Oracle Bug ID of Oracle Communications EAGLE Element Management System", "text": "40205792" }, { "system_name": "Oracle Bug ID of Oracle Communications LSMS", "text": "40205808" }, { "system_name": "Oracle Bug ID of Oracle Communications EAGLE LNP Application Processor", "text": "40205807" }, { "system_name": "Oracle Bug ID of Oracle Communications User Data Repository", "text": "40192314" }, { "system_name": "Oracle Bug ID of Oracle Communications Performance Intelligence Center (PIC) Software", "text": "40192844" }, { "system_name": "Oracle Bug ID of Oracle Solaris", "text": "40189544" }, { "system_name": "Oracle Bug ID of Oracle Communications EAGLE Application Processor", "text": "40193825" }, { "system_name": "Oracle Bug ID of Oracle Communications Unified Assurance", "text": "40132636" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Communications Unified Assurance product of Oracle Communications (component: Core (PHP)). Supported versions that are affected are 6.1.1-7.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Unified Assurance. Successful attacks of this vulnerability can result in takeover of Oracle Communications Unified Assurance.", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications EAGLE LNP Application Processor product of Oracle Communications (component: Patches (PHP)). The supported version that is affected is 11.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE LNP Application Processor. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE LNP Application Processor.", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications EAGLE Element Management System product of Oracle Communications (component: Security (PHP)). The supported version that is affected is 47.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE Element Management System. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE Element Management System.", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications Diameter Signaling Router product of Oracle Communications (component: Maintenance (PHP)). Supported versions that are affected are 8.6.0 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Diameter Signaling Router. Successful attacks of this vulnerability can result in takeover of Oracle Communications Diameter Signaling Router.", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications LSMS product of Oracle Communications (component: Platform (PHP)). The supported version that is affected is 14.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications LSMS. Successful attacks of this vulnerability can result in takeover of Oracle Communications LSMS.", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications Performance Intelligence Center (PIC) Software product of Oracle Communications (component: Internal Operations (PHP)). Supported versions that are affected are 10.4 and 10.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Performance Intelligence Center (PIC) Software. Successful attacks of this vulnerability can result in takeover of Oracle Communications Performance Intelligence Center (PIC) Software.", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications User Data Repository product of Oracle Communications (component: Security (PHP)). The supported version that is affected is 15.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications User Data Repository. Successful attacks of this vulnerability can result in takeover of Oracle Communications User Data Repository.", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility (PHP)). The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris.", "title": "Vulnerability Description" }, { "category": "description", "text": "Vulnerability in the Oracle Communications EAGLE Application Processor product of Oracle Communications (component: Patches (PHP)). Supported versions that are affected are 17.0 and 17.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE Application Processor. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE Application Processor.", "title": "Vulnerability Description" } ], "product_status": { "known_affected": [ "P-11125V-47.0", "P-11044V-10.4", "P-11122V-17.1", "P-11122V-17.0", "P-10899V-9.0.0", "P-11118V-11.1", "P-10006V-11", "P-11044V-10.5", "P-11108V-15.0", "P-10899V-8.6.0", "P-11114V-14.0", "P-14597V-6.1.1-7.0.0" ] }, "remediations": [ { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-14597V-6.1.1-7.0.0" ], "url": "https://support.oracle.com/support/?documentId=KB934766" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-11118V-11.1", "P-11114V-14.0", "P-11122V-17.1", "P-11122V-17.0" ], "url": "https://support.oracle.com/support/?documentId=KB935170" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-11125V-47.0" ], "url": "https://support.oracle.com/support/?documentId=KB935079" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-10899V-8.6.0", "P-10899V-9.0.0" ], "url": "https://support.oracle.com/support/?documentId=KB934773" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-11044V-10.4", "P-11044V-10.5" ], "url": "https://support.oracle.com/support/?documentId=KB934954" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-11108V-15.0" ], "url": "https://support.oracle.com/support/?documentId=KB935072" }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "P-10006V-11" ], "url": "https://support.oracle.com/support/?documentId=CPU429" } ] } ] }