CVE-2026-71151

Published Aug 18, 2026

Last updated 2 months ago

Oracle VM VirtualBox

Oracle Virtualization

Overview

AI description

Automated description summarized from trusted sources.

It appears there might be a slight typo in the CVE ID provided. Based on popular articles, a closely related vulnerability is **CVE-2026-61151**, which affects Oracle Commerce Guided Search and Oracle Commerce Experience Manager. CVE-2026-61151 is an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search or Oracle Commerce Experience Manager. Successful exploitation of this vulnerability can lead to unauthorized access to critical data, or even complete access to all data accessible by these Oracle Commerce products. Additionally, an attacker could gain unauthorized update, insert, or delete access to some of the accessible data. The affected version is 11.4 of Oracle Commerce.

Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N).
Source: secalert_us@oracle.com
NVD status: Analyzed
Products: vm_virtualbox

Risk scores

CVSS 3.1

Type: Secondary
Base score: 5.6
Impact score: 4
Exploitability score: 1.1
Vector string: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284

Hype score: Not currently trending

CVE-2026-71151: Retbleed guest->host on virtualbox :) https://t.co/i2BzkBrXbt
@wiknerj
21 Sept 2026
6176 Impressions
13 Retweets
73 Likes
39 Bookmarks
0 Replies
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:oracle:vm_virtualbox:7.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId": "B24A2B7B-FBEB-4F1A-8833-A677EC8B2BA8",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.