CVE-2026-34311

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-34311
Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are affected are 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.oracle.com/security-alerts/cspumay2026.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.6.19.24:*:*:*:*:*:*:*
cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.6.22:*:*:*:*:*:*:*
cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.6.25.19:*:*:*:*:*:*:*
cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.6.27.6:*:*:*:*:*:*:*
cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.6.28:*:*:*:*:*:*:*
History

14 Oct 2026, 20:10

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad en el producto Oracle Hospitality OPERA 5 Property Services de Oracle Hospitality Applications (componente: Opera). Las versiones compatibles afectadas son 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 y 5.6.28. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red a través de HTTP comprometer Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle Hospitality OPERA 5 Property Services. Puntuación Base CVSS 3.1 de 9.8 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Information

Published : 2026-05-28 21:16

Updated : 2026-10-14 20:10

NVD link : CVE-2026-34311

Mitre link : CVE-2026-34311

CVE.ORG link : CVE-2026-34311

JSON object : View

Products Affected

oracle

  • hospitality_opera_5_property_services
CWE
NVD-CWE-noinfo