CVE-2026-71106

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected are 5.6.28.0-5.6.28.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

• CWE-284

• https://www.oracle.com/security-alerts/cspuaug2026.htmlVendor Advisory

Published

Aug 18, 2026

Last Modified

Sep 4, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71100Vulnerability in the RDBMS component of Oracle Database Serv…5.3
• CVE-2026-71101Vulnerability in the Oracle HRMS (US) product of Oracle E-Bu…7.8
• CVE-2026-71102Vulnerability in the Portable Clusterware component of Oracl…9.1
• CVE-2026-71103Vulnerability in the Oracle Hyperion Financial Management pr…6.3
• CVE-2026-71104Vulnerability in the Oracle HRMS (Netherlands) product of Or…7.2
• CVE-2026-71105Vulnerability in the Oracle Hyperion Financial Management pr…4.7
• CVE-2026-71107Vulnerability in the Oracle Business Intelligence Enterprise…7.5
• CVE-2026-71108Vulnerability in the Oracle Hyperion Financial Management pr…5.3
• CVE-2026-71109Vulnerability in the Oracle Hyperion Financial Management pr…6.7
• CVE-2026-7111Text::CSV_XS versions before 1.62 for Perl have a use-after-…8.4
• CVE-2026-71110Vulnerability in the Helidon product of Oracle Fusion Middle…8.1
• CVE-2026-71111Vulnerability in the Oracle Identity Manager product of Orac…7.8