CVE-2026-35253

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-35253

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-35253.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-35253

Published

2026-05-06T06:22:28.369Z

Modified

2026-07-08T08:13:08.347624768Z

Severity

4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected is v0.22.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Macaron Tool. Successful attacks of this vulnerability can result in Oracle Macaron Tool failing host address validation.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/35xxx/CVE-2026-35253.json",
    "cna_assigner": "oracle",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "v0.22.0"
                },
                {
                    "last_affected": "v0.22.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/oracle/macaron

Affected ranges

Type

GIT

Repo

https://github.com/oracle/macaron

Events

Introduced

fda4dda04aa7228fcaba162804891806cf5a1375

Last affected

fda4dda04aa7228fcaba162804891806cf5a1375

Database specific

{
    "cpe": "cpe:2.3:a:oracle:macaron:0.22.0:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "0.22.0"
        },
        {
            "last_affected": "0.22.0"
        }
    ]
}

Affected versions

0.*

0.22.0

v0.*

v0.22.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-35253.json"