CVE-2026-60406
Medium · 6.7CVSS
6.7
EPSS
0.2%
Published
Jul 21, 2026
CISA due date
—
The record
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen In-Memory Database executes to compromise TimesTen In-Memory Database. Successful attacks of this vulnerability can result in takeover of TimesTen In-Memory Database. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121514 A weakness has been identified in EasySoft ZenTao PMS up to 22.6. CWE-269
- CVE-2026-121090 Improper privilege management in Navigation in Google Chrome on on iOS prior to… CWE-269
- CVE-2026-121559 GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation… CWE-269
- CVE-2026-121419 SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerability where… CWE-269
- CVE-2026-115231 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a… CWE-269
- CVE-2026-91893 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper… CWE-269
- CVE-2026-58974 In multiple locations, there is a possible permission bypass due to a missing permission… CWE-269
- CVE-2026-58962 In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible… CWE-269