Text Form of Security Alert CVE-2026-109618 Risk Matrices

Text Form of Oracle Security Alert - CVE-2026-109618 and CVE-2026-109619 Risk Matrices

This document provides the text form of the CVE-2026-109618 and CVE-2026-109619 Advisory Risk Matrices. Please note that the CVE IDs in this document correspond to the same CVE IDs in the CVE-2026-109618 Advisory.

This page contains the following text format Risk Matrices:

Oracle Communications
Oracle Systems

Text Form of Risk Matrix for Oracle Communications

This table provides the text form of the Risk Matrix for Oracle Communications.

CVE ID	Description
CVE-2026-109618	Vulnerability in the Oracle Communications Diameter Signaling Router product of Oracle Communications (component: Maintenance (PHP)). Supported versions that are affected are 8.6.0 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Diameter Signaling Router. Successful attacks of this vulnerability can result in takeover of Oracle Communications Diameter Signaling Router. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory] The patch for CVE-2026-109618 also addresses CVE-2026-109619.
CVE-2026-109618	Vulnerability in the Oracle Communications EAGLE Application Processor product of Oracle Communications (component: Patches (PHP)). Supported versions that are affected are 17.0 and 17.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE Application Processor. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE Application Processor. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory] The patch for CVE-2026-109618 also addresses CVE-2026-109619.
CVE-2026-109618	Vulnerability in the Oracle Communications EAGLE Element Management System product of Oracle Communications (component: Security (PHP)). The supported version that is affected is 47.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE Element Management System. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE Element Management System. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory] The patch for CVE-2026-109618 also addresses CVE-2026-109619.
CVE-2026-109618	Vulnerability in the Oracle Communications EAGLE LNP Application Processor product of Oracle Communications (component: Patches (PHP)). The supported version that is affected is 11.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE LNP Application Processor. Successful attacks of this vulnerability can result in takeover of Oracle Communications EAGLE LNP Application Processor. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory] The patch for CVE-2026-109618 also addresses CVE-2026-109619.
CVE-2026-109618	Vulnerability in the Oracle Communications LSMS product of Oracle Communications (component: Platform (PHP)). The supported version that is affected is 14.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications LSMS. Successful attacks of this vulnerability can result in takeover of Oracle Communications LSMS. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory] The patch for CVE-2026-109618 also addresses CVE-2026-109619.
CVE-2026-109618	Vulnerability in the Oracle Communications Performance Intelligence Center (PIC) Software product of Oracle Communications (component: Internal Operations (PHP)). Supported versions that are affected are 10.4 and 10.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Performance Intelligence Center (PIC) Software. Successful attacks of this vulnerability can result in takeover of Oracle Communications Performance Intelligence Center (PIC) Software. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory] The patch for CVE-2026-109618 also addresses CVE-2026-109619.
CVE-2026-109618	Vulnerability in the Oracle Communications Unified Assurance product of Oracle Communications (component: Core (PHP)). Supported versions that are affected are 6.1.1-7.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Unified Assurance. Successful attacks of this vulnerability can result in takeover of Oracle Communications Unified Assurance. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory] The patch for CVE-2026-109618 also addresses CVE-2026-109619.
CVE-2026-109618	Vulnerability in the Oracle Communications User Data Repository product of Oracle Communications (component: Security (PHP)). The supported version that is affected is 15.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications User Data Repository. Successful attacks of this vulnerability can result in takeover of Oracle Communications User Data Repository. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory] The patch for CVE-2026-109618 also addresses CVE-2026-109619.

Text Form of Risk Matrix for Oracle Systems

This table provides the text form of the Risk Matrix for Oracle Systems.

CVE ID	Description
CVE-2026-109618	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility (PHP)). The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory] The patch for CVE-2026-109618 also addresses CVE-2026-109619.

CVE ID

Description

CVE-2026-109618

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility (PHP)). The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris.

CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (legend) [Advisory]

The patch for CVE-2026-109618 also addresses CVE-2026-109619.