CVE-2026-35255Disclosure(oracle / cloud_native_environment_command_line_interface)

LOWCVSS 6.6 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Patch oracle cloud_native_environment_command_line_interface systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploitable vulnerability allows unauthenticated attacker to compromise Oracle Cloud Native Environment Command Line Interface product via a malicious environment variable. Successful attacks of this vulnerability can result in Oracle Cloud Native Environment Command Line Interface allowing users to execute arbitrary code.

oracle CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.html

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

cloud_native_environment_command_line_interface

Threat summary

Patch or workaround signal is available
3 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 2 classified signals
3 total mentions across 1 day

Affected systems

Vendors

oracle

Products

cloud_native_environment_command_line_interface

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets2 URLs

By indicator

Full discourse3 posts

Upwind Security MDR@UpwindMDR155d
Patch
🚨 CVE-2026-35255 | Oracle Cloud Native Environment CLI RCE A flaw in Oracle Cloud Native Environment CLI v2.3.2 allows attackers to abuse malicious environment variables for arbitrary code execution. Patch immediately if exposed. #CyberSecurity #CloudSecurity #Oracle
Post summary
The post warns of a CVE‑2026‑35255 RCE in Oracle Cloud Native Environment CLI, urging immediate patching to prevent exploitation via malicious environment variables.
0002075
149 followersView on X
CVE@CVEnew155d
Disclosure
CVE-2026-35255 Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2.… https://www.cve.org/CVERecord?id=CVE-2026-35255
Post summary
The text announces CVE-2026-35255 as affecting Oracle Cloud Native Environment Command Line Interface v2.3.2 and provides a link to the official CVE record, but offers no additional details.
00011232
57.7K followersView on X
Infoflowcloud@infoflowcloud155d
Disclosure
🚨*CVE* CVE-2026-35255 Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2.… https://www.cve.org/CVERecord?id=CVE-2026-35255 ----- Traducción: CVE-2026-35255 Vul… http://infoflow.cloud`
Post summary
This post announces CVE-2026-35255 affecting Oracle Cloud Native Environment CLI v2.3.2, linking to the CVE record but providing no additional technical, exploit, or mitigation details.
0000042
75 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	oracle	cloud_native_environment_command_line_interface	2.3.2	-	-

Explore more

Back to dashboard oracle CVEs cloud_native_environment_command_line_interface vulnerabilities