Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-61079: Vulnerability in Oracle GoldenGate (component: Libraries)

21
Routine
MEDIUM 5.8UPGRADE

CVE-2026-61079 is a medium-severity flaw (CVSS 5.8) affecting goldengate. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise Oracle GoldenGate. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can r

Why this priority

  • No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score5.8 (Medium)
Attack vectorLocal
Attack complexityHigh
Privileges neededHigh
User interactionRequired
EPSS exploit chance0.1% (top 99%)
CISA exploited listNo
WeaknessCWE-20, CWE-284, CWE-362
Published2026-07-21
Last modified2026-10-24
Publisher (CNA): Oracle · Vendor: oracle

Share: LinkedIn · X · Reddit

Last updated 2026-10-24 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

oracle goldengate UPGRADE
Affected: >= 19.1.0.0.0 and <= 19.30.0.0 · >= 21.3.0 and <= 21.21.0.0.0 · >= 23.4 and <= 23.26.2.0.0
Fixed in: newer than 23.26.2.0.0
Safe to downgrade to: a release before 19.1.0.0.0
1. Check installed version
apt-cache policy goldengate || rpm -q goldengate || goldengate --version
2. UPGRADE to newer than 23.26.2.0.0 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade goldengate
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade goldengate
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 19.1.0.0.0 (Debian / Ubuntu)
apt-cache madison goldengate sudo apt install goldengate=<VERSION_BEFORE_19.1.0.0.0> sudo apt-mark hold goldengate
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list goldengate sudo dnf downgrade goldengate-<VERSION_BEFORE_19.1.0.0.0> sudo dnf versionlock add goldengate
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-61079?

goldengate: upgrade to newer than 23.26.2.0.0. Exact commands for each OS are on this page.

Is CVE-2026-61079 being exploited?

CVE-2026-61079 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-61079 affect?

CVE-2026-61079 affects goldengate. Severity is medium (CVSS 5.8). Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the in

How urgent is CVE-2026-61079?

Priority 21/100. No elevated risk signals yet.

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.