# CVE-2026-60397: Oracle GoldenGate denial of service in Admin Server Executable

Source: https://junglewise.ai/threats/cve-2026-60397-oracle-goldengate-denial-of-service-in-admin-server-executable  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-21. Updated: 2026-07-21  
License: CC BY 4.0 with a link back

CVE-2026-60397 · Severity: medium · CVSS 4.3 · Published 2026-07-21

Oracle GoldenGate, a software suite for real-time data integration and replication, contains a vulnerability in its Admin Server component. An attacker located on the same local network as the server could exploit this flaw to disrupt the service. While this does not allow for data theft, it can cause a partial denial of service, potentially delaying critical data synchronization tasks.

Technologies: [Oracle GoldenGate](https://junglewise.ai/threats/technologies/goldengate). Vendors: [Oracle](https://junglewise.ai/threats/vendors/oracle).

## Quick answers

**Is CVE-2026-60397 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-60397 being exploited in the wild.

**How severe is CVE-2026-60397?** Medium severity, with a CVSS score of 4.3, published 21 July 2026.

**Which products and versions are affected?** Oracle GoldenGate 19.1.0.0.0-19.30.0.0, 21.3-21.21, 23.4-23.26.1.

**Is there a fix for CVE-2026-60397?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-60397 attacked?** It is attacked from the adjacent network, in a software library.

**Am I affected by CVE-2026-60397?** Check whether you run Oracle GoldenGate at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in the Admin Server Executable component of Oracle GoldenGate. The flaw is classified as easily exploitable and requires the attacker to have access to the adjacent physical communication segment (local network) where the software is running. No authentication or user interaction is required for exploitation. A successful attack results in a partial denial of service (DoS), impacting the availability of the GoldenGate service. The vulnerability affects versions 19.1.0.0.0 through 19.30.0.0, 21.3 through 21.21, and 23.4 through 23.26.1.

## Affected products

- Oracle GoldenGate 19.1.0.0.0-19.30.0.0, 21.3-21.21, 23.4-23.26.1

## Timeline

- 2026-07-21: advisory: Oracle published the July 2026 Critical Patch Update containing this advisory.
- 2026-07-21: disclosed

## References

- [https://www.oracle.com/security-alerts/cpujul2026.html](https://www.oracle.com/security-alerts/cpujul2026.html)

## Related threats

- [Oracle GoldenGate privilege escalation in Vendor Access Module](https://junglewise.ai/threats/cve-2026-91547-vulnerability-in-oracle-goldengate-component-vendor-access-module)
- [Oracle GoldenGate privilege escalation in Admin Client](https://junglewise.ai/threats/cve-2026-91530-vulnerability-in-oracle-goldengate-component-admin-client)
- [Oracle GoldenGate privilege escalation in Admin Server](https://junglewise.ai/threats/cve-2026-87351-vulnerability-in-oracle-goldengate-component-admin-server)
- [Oracle GoldenGate privilege escalation in Vendor Access Module](https://junglewise.ai/threats/cve-2026-101601-vulnerability-in-oracle-goldengate-component-vendor-access)
- [Oracle GoldenGate unauthenticated compromise in Config Service Executable](https://junglewise.ai/threats/cve-2026-61106-oracle-goldengate-unauthenticated-compromise-in-config-service)