CVE-2026-21991mediumCWE-22

CVE-2026-21991: medium-severity vulnerability in Oracle Linux

Published · Updated

Follow this CVE+ Monitor Oracle Linux+ Monitor dtrace

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.2%
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Oracle Corporation · Oracle Linux
Related CVEs — Oracle Linux

In the same product, most dangerous first.

CVE-2020-2732MEDIUMCVE-2020-2732EPSS 0.9%CVE-2022-21499MEDIUMCVE-2022-21499EPSS 0.6%CVE-2022-21385MEDIUMCVE-2022-21385EPSS 0.4%CVE-2021-2464HIGHCVE-2021-2464EPSS 0.3%CVE-2022-21504MEDIUMCVE-2022-21504EPSS 0.3%CVE-2022-21505MEDIUMCVE-2022-21505EPSS 0.2%