# CVE-2026-60411: Oracle TimesTen In-Memory Database denial of service in ttcserver

Source: https://junglewise.ai/threats/cve-2026-60411-oracle-timesten-in-memory-database-denial-of-service-in-ttcserver  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-21. Updated: 2026-07-21  
License: CC BY 4.0 with a link back

CVE-2026-60411 · Severity: medium · CVSS 6.5 · Published 2026-07-21

Oracle TimesTen In-Memory Database is a high-performance database used for applications requiring extremely fast data access. A vulnerability in the ttcserver component allows an attacker on the same local network to crash the database or cause it to stop responding. This results in a complete denial of service, potentially disrupting business operations that rely on real-time data processing.

Technologies: [Oracle TimesTen In-Memory Database](https://junglewise.ai/threats/technologies/timesten-in-memory-database). Vendors: [Oracle](https://junglewise.ai/threats/vendors/oracle).

## Quick answers

**Is CVE-2026-60411 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-60411 being exploited in the wild.

**How severe is CVE-2026-60411?** Medium severity, with a CVSS score of 6.5, published 21 July 2026.

**Which products and versions are affected?** Oracle TimesTen In-Memory Database 26.1.1.1.0.

**Is there a fix for CVE-2026-60411?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-60411 attacked?** It is attacked from the adjacent network, in a software library.

**Am I affected by CVE-2026-60411?** Check whether you run Oracle TimesTen In-Memory Database at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in the ttcserver component of Oracle TimesTen In-Memory Database version 26.1.1.1.0. The flaw is easily exploitable by an unauthenticated attacker located on the same physical communication segment (adjacent network) as the database server. Successful exploitation allows the attacker to trigger a hang or a frequently repeatable crash, leading to a complete loss of availability (Denial of Service). The vulnerability is tracked as CVE-2026-60411 with a CVSS 3.1 base score of 6.5. Oracle addressed this in the July 2026 Critical Patch Update.

## Affected products

- Oracle TimesTen In-Memory Database 26.1.1.1.0

## Timeline

- 2026-07-21: advisory: Oracle published the July 2026 Critical Patch Update.
- 2026-07-21: disclosed: CVE-2026-60411 was published to the NVD.

## References

- [https://www.oracle.com/security-alerts/cpujul2026.html](https://www.oracle.com/security-alerts/cpujul2026.html)

## Related threats

- [Oracle TimesTen In-Memory Database information disclosure in Kubernetes Operator](https://junglewise.ai/threats/cve-2026-87354-vulnerability-in-oracle-timesten-in-memory-database-component)
- [Oracle TimesTen In-Memory Database privilege escalation](https://junglewise.ai/threats/cve-2026-101522-vulnerability-in-oracle-timesten-in-memory-database-component)
- [Oracle TimesTen In-Memory Database partial DoS in Kubernetes Operator](https://junglewise.ai/threats/cve-2026-60410-oracle-timesten-in-memory-database-partial-dos-in-kubernetes)
- [Oracle TimesTen In-Memory Database compromise in Kubernetes Operator](https://junglewise.ai/threats/cve-2026-60409-oracle-timesten-in-memory-database-compromise-in-kubernetes)
- [Oracle TimesTen In-Memory Database information disclosure in Kubernetes Operator](https://junglewise.ai/threats/cve-2026-60408-oracle-timesten-in-memory-database-information-disclosure-in)