VulnSocial

CVE-2026-71125Disclosure(oracle / vm_virtualbox)

LOWCVSS 6.1 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H).

oracle CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-363

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • vm_virtualbox

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
oracle
Products
vm_virtualbox

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-21: 208-21
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • Octane Security@octane_security
    Disclosure

    You use VirtualBox to isolate software you don’t trust. But we crafted a CUE file that corrupts memory and crashes VirtualBox on the host before the sandbox can start. @Oracle assigned CVE-2026-71125, our second VirtualBox CVE in 28 days. https://www.octane.security/post/two-oracle-virtualbox-cves-in-28-days-cve-2026-71125?utm_source=x&utm_medium=social

    Post summary

    A new VirtualBox CVE (CVE‑2026‑71125) that causes a memory‑corruption crash via a crafted CUE file is announced, with a link to a blog post providing further details.

    2511622.9K
    5.7K followersView on X
  • Octane Security@octane_security
    General

    https://nvd.nist.gov/vuln/detail/CVE-2026-71125

    Post summary

    The provided text links only to the NVD entry for CVE‑2026‑71125 without any additional context or details.

    01050244
    5.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apporaclevm_virtualbox7.2.14--

Explore more

Back to dashboardoracle CVEsvm_virtualbox vulnerabilities