# CVE-2026-61084: Oracle GoldenGate unauthorized data access in Libraries

Source: https://junglewise.ai/threats/cve-2026-61084-oracle-goldengate-unauthorized-data-access-in-libraries  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-21. Updated: 2026-07-22  
License: CC BY 4.0 with a link back

CVE-2026-61084 · Severity: medium · CVSS 4.4 · Published 2026-07-21

Oracle GoldenGate, a software suite used for real-time data integration and replication, contains a vulnerability in its library components. An attacker who already has basic access to the underlying server can exploit this to view, modify, or delete sensitive data managed by the application. This could lead to unauthorized data manipulation or the exposure of confidential business information.

Technologies: [Oracle GoldenGate](https://junglewise.ai/threats/technologies/goldengate). Vendors: [Oracle](https://junglewise.ai/threats/vendors/oracle).

## Quick answers

**Is CVE-2026-61084 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-61084 being exploited in the wild.

**How severe is CVE-2026-61084?** Medium severity, with a CVSS score of 4.4, published 21 July 2026.

**Which products and versions are affected?** Oracle GoldenGate 19.1.0.0.0-19.30.0.0, 21.3-21.21, 23.4-23.26.2.

**Is there a fix for CVE-2026-61084?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-61084 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-61084?** Check whether you run Oracle GoldenGate at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in the Libraries component of Oracle GoldenGate. The flaw is categorized as easily exploitable by a low-privileged attacker with local logon access to the infrastructure where GoldenGate is executing. Successful exploitation allows the attacker to compromise the integrity and confidentiality of the system by performing unauthorized updates, inserts, or deletions of data, as well as unauthorized read access to a subset of data. The attack vector is local (AV:L) and requires no user interaction. Fixes are typically delivered via Oracle's Critical Patch Update (CPU) program.

## Affected products

- Oracle GoldenGate 19.1.0.0.0-19.30.0.0, 21.3-21.21, 23.4-23.26.2

## Timeline

- 2026-07-21: advisory: Oracle published the July 2026 Critical Patch Update containing this CVE.
- 2026-07-21: disclosed

## References

- [https://www.oracle.com/security-alerts/cpujul2026.html](https://www.oracle.com/security-alerts/cpujul2026.html)

## Related threats

- [Oracle GoldenGate privilege escalation in Vendor Access Module](https://junglewise.ai/threats/cve-2026-91547-vulnerability-in-oracle-goldengate-component-vendor-access-module)
- [Oracle GoldenGate privilege escalation in Admin Client](https://junglewise.ai/threats/cve-2026-91530-vulnerability-in-oracle-goldengate-component-admin-client)
- [Oracle GoldenGate privilege escalation in Admin Server](https://junglewise.ai/threats/cve-2026-87351-vulnerability-in-oracle-goldengate-component-admin-server)
- [Oracle GoldenGate privilege escalation in Vendor Access Module](https://junglewise.ai/threats/cve-2026-101601-vulnerability-in-oracle-goldengate-component-vendor-access)
- [Oracle GoldenGate unauthenticated compromise in Config Service Executable](https://junglewise.ai/threats/cve-2026-61106-oracle-goldengate-unauthenticated-compromise-in-config-service)