PatchTheCVEcommunications converged application server vulnerabilities and fixes
Recent CVEs affecting communications converged application server, with upgrade or downgrade steps. 4 tracked.
Also searched as: communicationsconvergedapplicationserver.
communications converged application server has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-07-21. Highest priority: CVE-2026-61223 (score 45/100).
- CVE-2026-61223 CRITICAL 9.0 DOWNGRADE Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (comp
- CVE-2026-61225 HIGH 8.1 DOWNGRADE Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (comp
- CVE-2026-61224 HIGH 8.0 DOWNGRADE Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (comp
- CVE-2026-61226 HIGH 7.5 DOWNGRADE Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (comp
FAQ
How do I fix communications converged application server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is communications converged application server being exploited right now?
None of the tracked communications converged application server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which communications converged application server CVE should I patch first?
CVE-2026-61223 currently ranks highest (45/100): Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (comp.