CVE-2026-83419

Medium

Description

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Cloud Native Core Security Edge Protection Proxy. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Cloud Native Core Security Edge Protection Proxy accessible data as well as unauthorized read access to a subset of Oracle Communications Cloud Native Core Security Edge Protection Proxy accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

SeverityMedium
CVSS5.4
Exploit probability—
ProductOracle Communications Cloud Native Core Security Edge Protection Proxy
PublishedSep 15, 2026
First seenSep 15, 2026

How to fix

Affected products

ProductAffected versionsFixed in
Oracle Corporation Oracle Communications Cloud Native Core Security Edge Protection Proxy26.1.200, 25.2.201—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-83419 · Oracle Communications Cloud Native Core Security Edge Protection Proxy · Dark Radar