Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploitable vulnerability allows unauthenticated attacker to compromise Oracle Cloud Native Environment Command Line Interface product via a malicious environment variable. Successful attacks of this vulnerability can result in Oracle Cloud Native Environment Command Line Interface allowing users to execute arbitrary code.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
| Vendors | Products |
|---|
References
History
Wed, 06 May 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthorized Arbitrary Code Execution via Malicious Environment Variable in Oracle Cloud Native Environment Command Line Interface | |
| Weaknesses | CWE-20 CWE-78 |
Wed, 06 May 2026 09:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploitable vulnerability allows unauthenticated attacker to compromise Oracle Cloud Native Environment Command Line Interface product via a malicious environment variable. Successful attacks of this vulnerability can result in Oracle Cloud Native Environment Command Line Interface allowing users to execute arbitrary code. | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2026-05-06T08:05:59.070Z
Reserved: 2026-04-01T20:03:40.834Z
Link: CVE-2026-35255
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-05-06T10:16:19.827
Modified: 2026-05-06T10:16:19.827
Link: CVE-2026-35255
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-05-06T11:30:26Z