GCVE-110-NCSC-2026-23

Advisory PublishedCVSS 9.8/10

Vulnetix · Advisory published January 21, 2026

Critical vulnerabilities in Oracle Communications Cloud Native Core and Siebel CRM allow unauthenticated access, while SQLite versions prior to 3.50.2 face memory corruption risks and other security issues.

Download JSON Open in Console

Weaknesses (CWE)

CWE-197Numeric Truncation ErrorCWE-125Out-of-bounds ReadCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-674Uncontrolled RecursionCWE-770Allocation of Resources Without Limits or ThrottlingCWE-611Improper Restriction of XML External Entity Reference

Risk Scores

CVSS 3.1

9.8/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2025-27210 CVE-2025-48924 CVE-2025-55163 CVE-2025-66516 CVE-2025-6965 CVE-2025-9086 CVE-2025-9230 CVE-2026-21934 CVE-2026-21938 CVE-2026-21951 CVE-2026-21961 CVE-2026-21971

References

advisory

Browse GCVE Records

74,608 records in the GCVE database · Updated July 24, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON