# CVE-2026-83343

Unauthenticated HTTP access can compromise Oracle Utilities Network Management System

- Page: https://www.vulneraibility.com/cve/CVE-2026-83343
- CVSS: 8.2
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.34% (percentile 26.9)
- CISA SSVC: exploitation none, automatable yes, technical impact partial (assessed 2026-09-21)
- Weakness: CWE-306
- Published: 2026-09-15

## Affected versions

- Oracle Corporation Oracle Utilities Network Management System: affected >= 2.5.0.2.0 and <= 2.5.0.2.13; >= 2.6.0.1.0 and <= 2.6.0.12B; >= 2.6.0.2.0 and <= 2.6.0.2.10A; >= 25.12.0.0.0 and <= 25.12.0.0.3

A version outside these ranges is not a statement that it is unaffected.

## Impact

Remote unauthenticated HTTP access allows read of sensitive data and unauthorized insert/update/delete of Oracle Utilities NMS data.

## Action

Immediate action required

## Recommendation

Apply Oracle patch immediately; restrict/block HTTP access; isolate affected systems and audit logs.

## References

- [advisory] https://www.oracle.com/security-alerts/cspusep2026.html

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.