What is GHSA-66hf-538v-h8q3?

GHSA-66hf-538v-h8q3 is a security advisory published by GitHub Security Advisories with High severity. Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that...

Which CVE IDs does GHSA-66hf-538v-h8q3 cover?

GHSA-66hf-538v-h8q3 covers the following CVE IDs: CVE-2026-83272. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-66hf-538v-h8q3?

GHSA-66hf-538v-h8q3 has a CVSS v3 base score of 8.5, published by GitHub Security Advisories.

GHSA-66hf-538v-h8q3HighCVSS 8.5

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that...

Vendor

GitHub Security Advisories

Published

September 15, 2026

Last Modified

September 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-83272 →

📋 Description

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Create Index privilege with network access via Oracle Net to compromise Oracle Text. While the vulnerability is in Oracle Text, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Text. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-83272
https://www.oracle.com/security-alerts/cspusep2026.html
https://github.com/advisories/GHSA-66hf-538v-h8q3