CVE-2026-35253
Last modified
CVE-2026-35253 is a medium-severity vulnerability rated 4.7/10 on the CVSS scale. Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected is v0.22.0. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected is v0.22.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Macaron Tool. Successful attacks of this vulnerability can result in Oracle Macaron Tool failing host address validation.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Macaron | 0.22.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-35253?
How severe is CVE-2026-35253?
How do I fix CVE-2026-35253?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-35248Vulnerability in the Oracle VM VirtualBox product of Oracle …5
- CVE-2026-35249Vulnerability in the Oracle VM VirtualBox product of Oracle …3.2
- CVE-2026-3525Incorrect Authorization vulnerability in Drupal File Access …5.3
- CVE-2026-35250Vulnerability in the Oracle VM VirtualBox product of Oracle …2.3
- CVE-2026-35251Vulnerability in the Oracle VM VirtualBox product of Oracle …7.5
- CVE-2026-35252Vulnerability in the Oracle Security Service product of Orac…6.4
- CVE-2026-35254Vulnerability in the Oracle OCI CLI product of Oracle Open S…6.1
- CVE-2026-35255Vulnerability in the Oracle Cloud Native Environment Command…6.6
- CVE-2026-35258Vulnerability in the WebLogic Server product of Oracle Fusio…8.7
- CVE-2026-35259Vulnerability in the WebLogic Server product of Oracle Fusio…8.8
- CVE-2026-3526Incorrect Authorization vulnerability in Drupal File Access …5.3
- CVE-2026-35261Vulnerability in the Oracle Access Manager product of Oracle…6.5
Are you affected by CVE-2026-35253?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST