CVE-2026-35255_CVE-2026-35255

{
    "lastseen": "",
    "description": "Vulnerability in the Oracle\u00a0Cloud Native Environment Command Line Interface\u00a0product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploitable vulnerability allows unauthenticated attacker to compromise Oracle\u00a0Cloud Native Environment Command Line Interface\u00a0product via a malicious environment variable. Successful attacks of this vulnerability can result in Oracle Cloud Native Environment Command Line Interface\u00a0allowing users to execute arbitrary code.",
    "published": "2026-05-06T08:05:59.070Z",
    "modified": "2026-05-06T08:05:59.070Z",
    "type": "cve",
    "title": "CVE-2026-35255",
    "source": "oracle",
    "references": "https://www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.html",
    "id": "CVE-2026-35255",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Oracle Corporation Oracle Cloud Native Environment Command Line Interface v2.3.2",
    "sourceHref": "",
    "cvss": {
        "score": 6.6,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Oracle Cloud Native Environment Command Line Interface",
    "version": "v2.3.2",
    "vendor": "Oracle Corporation",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}