CVE-2026-21997 - Vulnerability Analysis

Overview

Oracle Life Sciences Empirica Signal 9.2.1-9.2.3 contains a broken access control vulnerability caused by improper authorization in Common Core, letting low privileged attackers with network access via HTTP create, delete, modify, or read critical data, exploit requires low privileged network access.

Severity & Score

Impact

Low privileged attackers can create, delete, modify, and read critical data, potentially compromising data integrity and confidentiality.

Mitigation

Update to the latest available version beyond 9.2.3.

References

• https://www.oracle.com/security-alerts/cpuapr2026.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner