goldengate vulnerabilities and fixes

Recent CVEs affecting goldengate, with upgrade or downgrade steps. 12 tracked.

goldengate has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2026-07-21. Highest priority: CVE-2026-61106 (score 41/100).

• CVE-2026-60157 HIGH 8.8 UPGRADE Vulnerability in Oracle GoldenGate (component: Service Manager)
• CVE-2026-60398 HIGH 8.8 UPGRADE Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices)
• CVE-2026-60400 HIGH 8.8 UPGRADE Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
• CVE-2026-60396 HIGH 7.2 UPGRADE Vulnerability in Oracle GoldenGate (component: Distribution Server executable)
• CVE-2026-60399 MEDIUM 6.5 UPGRADE Vulnerability in Oracle GoldenGate (component: Receiver Service Executable)
• CVE-2026-60394 MEDIUM 5.3 UPGRADE Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
• CVE-2026-60570 HIGH 7.8 UPGRADE Vulnerability in Oracle GoldenGate (component: Libraries)
• CVE-2026-60395 MEDIUM 4.3 UPGRADE Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
• CVE-2026-60397 MEDIUM 4.3 UPGRADE Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
• CVE-2026-61106 HIGH 8.1 UPGRADE Vulnerability in Oracle GoldenGate (component: Config Service Executable)
• CVE-2026-61079 MEDIUM 5.8 UPGRADE Vulnerability in Oracle GoldenGate (component: Libraries)
• CVE-2026-61084 MEDIUM 4.4 UPGRADE Vulnerability in Oracle GoldenGate (component: Libraries)

FAQ

How do I fix goldengate vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is goldengate being exploited right now?

None of the tracked goldengate CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which goldengate CVE should I patch first?

CVE-2026-61106 currently ranks highest (41/100): Vulnerability in Oracle GoldenGate (component: Config Service Executable).

← Back to latest CVEs