CVE-2026-101549 Vulnerability in Oracle Application Testing Suite (component: OpenScript).

High 7.8 Published Updated
Exploited in the wild
Not known
Fix
None listed

What is CVE-2026-101549?

CVE-2026-101549 is a high-severity vulnerability in Oracle Application Testing Suite, published on 20 Oct 2026.

Official description

Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Which versions are affected by CVE-2026-101549?

How do I fix CVE-2026-101549?

No fix has been published for CVE-2026-101549 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-101549 being exploited?

There is no known exploitation of CVE-2026-101549 in the wild and no public exploit code.

Sources

Also known as GHSA-4cvx-qj9m-q3cc.

Is CVE-2026-101549 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free