# Oracle Rest-Data-Services vulnerabilities Source: https://junglewise.ai/threats/technologies/rest-data-services Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/rest-data-services.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 37 vulnerabilities in Oracle Rest-Data-Services: 0 in the last 7 days and 27 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91610, was published on 20 October 2026. 27 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 27 - Last 90 days: 27 - All time: 37 (3 critical, 0 exploited in the wild) ## About Oracle Rest-Data-Services Oracle REST Data Services is a mid-tier application that enables the use of RESTful web services for data stored in Oracle Database. ## Latest Oracle Rest-Data-Services vulnerabilities - [CVE-2026-91610: Oracle REST Data Services remote code execution](https://junglewise.ai/threats/cve-2026-91610-vulnerability-in-oracle-rest-data-services-component-general) (high, CVSS 8.8, published 20 Oct 2026) - [CVE-2026-91609: Oracle REST Data Services authentication bypass in GraphQL](https://junglewise.ai/threats/cve-2026-91609-vulnerability-in-oracle-rest-data-services-component-graph-ql) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-101494: Oracle REST Data Services authentication bypass in Core](https://junglewise.ai/threats/cve-2026-101494-vulnerability-in-oracle-rest-data-services-component-core) (high, CVSS 7.7, published 20 Oct 2026) - [CVE-2026-101493: Oracle REST Data Services unauthorized data access in Core](https://junglewise.ai/threats/cve-2026-101493-vulnerability-in-oracle-rest-data-services-component-core) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-101386: Oracle REST Data Services data access bypass in Core](https://junglewise.ai/threats/cve-2026-101386-vulnerability-in-oracle-rest-data-services-component-core) (medium, CVSS 4.2, published 20 Oct 2026) - [CVE-2026-101385: Oracle REST Data Services data modification via HTTP](https://junglewise.ai/threats/cve-2026-101385-vulnerability-in-oracle-rest-data-services-component-core) (medium, CVSS 4.9, published 20 Oct 2026) - [CVE-2026-101384: Oracle REST Data Services unauthorized read access](https://junglewise.ai/threats/cve-2026-101384-vulnerability-in-oracle-rest-data-services-component-core) (medium, CVSS 5, published 20 Oct 2026) - [CVE-2026-101383: Oracle REST Data Services data manipulation vulnerability](https://junglewise.ai/threats/cve-2026-101383-vulnerability-in-oracle-rest-data-services-component-core) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-101382: Oracle REST Data Services data access vulnerability in Core](https://junglewise.ai/threats/cve-2026-101382-vulnerability-in-oracle-rest-data-services-component-core) (medium, CVSS 4.2, published 20 Oct 2026) - [CVE-2026-101381: Oracle REST Data Services data access vulnerability in ADP](https://junglewise.ai/threats/cve-2026-101381-vulnerability-in-oracle-rest-data-services-component-adp) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-101380: Oracle REST Data Services data exposure and modification in ADP](https://junglewise.ai/threats/cve-2026-101380-vulnerability-in-oracle-rest-data-services-component-adp) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-101379: Oracle REST Data Services unauthorized read access in ADP](https://junglewise.ai/threats/cve-2026-101379-vulnerability-in-oracle-rest-data-services-component-adp) (medium, CVSS 5.3, published 20 Oct 2026) - [CVE-2026-101378: Oracle REST Data Services data integrity bypass in ADP](https://junglewise.ai/threats/cve-2026-101378-vulnerability-in-oracle-rest-data-services-component-adp) (medium, CVSS 4.3, published 20 Oct 2026) - [CVE-2026-101376: Oracle REST Data Services Database Actions unauthorized data access](https://junglewise.ai/threats/cve-2026-101376-vulnerability-in-oracle-rest-data-services-component-database) (medium, CVSS 4.7, published 20 Oct 2026) - [CVE-2026-101375: Oracle REST Data Services unauthorized data access and denial of service](https://junglewise.ai/threats/cve-2026-101375-vulnerability-in-oracle-rest-data-services-component-database) (medium, CVSS 6.3, published 20 Oct 2026) - [CVE-2026-101374: Oracle REST Data Services integrity bypass in Backend-as-a-Service](https://junglewise.ai/threats/cve-2026-101374-vulnerability-in-oracle-rest-data-services-component-backend-as) (medium, CVSS 5.9, published 20 Oct 2026) - [CVE-2026-101369: Oracle REST Data Services data access vulnerability](https://junglewise.ai/threats/cve-2026-101369-vulnerability-in-oracle-rest-data-services-component-backend-as) (medium, CVSS 6.1, published 20 Oct 2026) - [CVE-2026-101368: Oracle REST Data Services data manipulation via HTTP](https://junglewise.ai/threats/cve-2026-101368-vulnerability-in-oracle-rest-data-services-component-backend-as) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-101367: Oracle REST Data Services privilege escalation in ADP](https://junglewise.ai/threats/cve-2026-101367-vulnerability-in-oracle-rest-data-services-component-adp) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-101366: Oracle REST Data Services information disclosure in ADP](https://junglewise.ai/threats/cve-2026-101366-vulnerability-in-oracle-rest-data-services-component-adp) (medium, CVSS 4.3, published 20 Oct 2026) - [CVE-2026-101365: Oracle REST Data Services data manipulation and partial denial of service](https://junglewise.ai/threats/cve-2026-101365-vulnerability-in-oracle-rest-data-services-component-database) (medium, CVSS 4.7, published 20 Oct 2026) - [CVE-2026-101364: Oracle REST Data Services CSRF in Database Actions](https://junglewise.ai/threats/cve-2026-101364-vulnerability-in-oracle-rest-data-services-component-database) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-101363: Oracle REST Data Services unauthorized read access in GraphQL](https://junglewise.ai/threats/cve-2026-101363-vulnerability-in-oracle-rest-data-services-component-graph-ql) (medium, CVSS 5.3, published 20 Oct 2026) - [CVE-2026-101362: Oracle REST Data Services data manipulation via HTTP](https://junglewise.ai/threats/cve-2026-101362-vulnerability-in-oracle-rest-data-services-component-core) (medium, CVSS 6.9, published 20 Oct 2026) - [CVE-2026-101361: Oracle REST Data Services data tampering vulnerability](https://junglewise.ai/threats/cve-2026-101361-vulnerability-in-oracle-rest-data-services-component-core) (medium, CVSS 4.2, published 20 Oct 2026) ## Most severe Oracle Rest-Data-Services vulnerabilities - [CVE-2026-46840: Oracle REST Data Services remote compromise in Backend-as-a-Service](https://junglewise.ai/threats/cve-2026-46840-oracle-rest-data-services-remote-compromise-in-backend-as-a) (critical, CVSS 10, published 28 May 2026) - [CVE-2026-46839: Oracle REST Data Services takeover in Core component](https://junglewise.ai/threats/cve-2026-46839-oracle-rest-data-services-takeover-in-core-component) (critical, CVSS 9.9, published 28 May 2026) - [CVE-2026-46775: Oracle REST Data Services takeover in Core component](https://junglewise.ai/threats/cve-2026-46775-oracle-rest-data-services-takeover-in-core-component) (critical, CVSS 9.9, published 28 May 2026) - [CVE-2026-91610: Oracle REST Data Services remote code execution](https://junglewise.ai/threats/cve-2026-91610-vulnerability-in-oracle-rest-data-services-component-general) (high, CVSS 8.8, published 20 Oct 2026) - [CVE-2026-35277: Oracle REST Data Services data compromise in Core component](https://junglewise.ai/threats/cve-2026-35277-oracle-rest-data-services-data-compromise-in-core-component) (high, CVSS 8.1, published 28 May 2026) - [CVE-2026-35266: Oracle REST Data Services security vulnerability in Core component](https://junglewise.ai/threats/cve-2026-35266-oracle-rest-data-services-security-vulnerability-in-core) (high, CVSS 7.9, published 28 May 2026) - [CVE-2026-101494: Oracle REST Data Services authentication bypass in Core](https://junglewise.ai/threats/cve-2026-101494-vulnerability-in-oracle-rest-data-services-component-core) (high, CVSS 7.7, published 20 Oct 2026) - [CVE-2026-46829: Oracle REST Data Services denial of service in Mongoapi](https://junglewise.ai/threats/cve-2026-46829-oracle-rest-data-services-denial-of-service-in-mongoapi) (high, CVSS 7.5, published 28 May 2026) - [CVE-2026-101362: Oracle REST Data Services data manipulation via HTTP](https://junglewise.ai/threats/cve-2026-101362-vulnerability-in-oracle-rest-data-services-component-core) (medium, CVSS 6.9, published 20 Oct 2026) - [CVE-2026-91609: Oracle REST Data Services authentication bypass in GraphQL](https://junglewise.ai/threats/cve-2026-91609-vulnerability-in-oracle-rest-data-services-component-graph-ql) (medium, CVSS 6.5, published 20 Oct 2026) ## Vulnerabilities per week 27 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 27 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle Rest-Data-Services vulnerabilities", https://junglewise.ai/threats/technologies/rest-data-services, 9 November 2026.