BaselineWatch
Desk

CVE-2026-101597

5.3 medium Awaiting Analysis

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 3

  1. StatusPublished → Awaiting AnalysisNVD modified 2026-10-21 18:43
  2. StatusReceived → PublishedNVD modified 2026-10-20 21:21
  3. First seenCVSS 5.3NVD modified 2026-10-20 22:18

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 1