CVE-2026-34191

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-34191", "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "state": "PUBLISHED", "assignerShortName": "apache", "dateReserved": "2026-03-26T12:09:55.611Z", "datePublished": "2026-08-06T14:32:24.362Z", "dateUpdated": "2026-08-06T21:56:08.447Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Apache Portable Runtime Utility", "vendor": "Apache Software Foundation", "versions": [{"lessThanOrEqual": "1.6.3", "status": "affected", "version": "1.6.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Elhanan Haenel"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.</p><p>This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3<br></p>"}], "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.\n\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3"}], "metrics": [{"other": {"content": {"text": "important"}, "type": "Textual description of severity"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", "dateUpdated": "2026-08-06T14:32:24.362Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf"}], "source": {"discovery": "UNKNOWN"}, "timeline": [{"lang": "en", "time": "2026-03-24T12:00:00.000Z", "value": "reported"}, {"lang": "en", "time": "2026-08-06T12:00:00.000Z", "value": "fixed in 1.6.x by r1936817"}, {"lang": "en", "time": "2026-08-06T12:58:00.000Z", "value": "1.6.4 released"}], "title": "Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-08-06T15:27:40.758050Z", "id": "CVE-2026-34191", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T15:27:52.891Z"}}, {"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/08/06/10"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-08-06T21:56:08.447Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/08/06/10"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-08-06T21:56:08.447Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-34191", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-06T15:27:40.758050Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T15:27:49.808Z"}}], "cna": {"title": "Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Elhanan Haenel"}], "metrics": [{"other": {"type": "Textual description of severity", "content": {"text": "important"}}}], "affected": [{"vendor": "Apache Software Foundation", "product": "Apache Portable Runtime Utility", "versions": [{"status": "affected", "version": "1.6.0", "versionType": "semver", "lessThanOrEqual": "1.6.3"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-03-24T12:00:00.000Z", "value": "reported"}, {"lang": "en", "time": "2026-08-06T12:00:00.000Z", "value": "fixed in 1.6.x by r1936817"}, {"lang": "en", "time": "2026-08-06T12:58:00.000Z", "value": "1.6.4 released"}], "references": [{"url": "https://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.\n\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3", "supportingMedia": [{"type": "text/html", "value": "<p>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.</p><p>This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3<br></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", "dateUpdated": "2026-08-06T14:32:24.362Z"}}}, "cveMetadata": {"cveId": "CVE-2026-34191", "state": "PUBLISHED", "dateUpdated": "2026-08-06T21:56:08.447Z", "dateReserved": "2026-03-26T12:09:55.611Z", "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "datePublished": "2026-08-06T14:32:24.362Z", "assignerShortName": "apache"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Apache Portable Runtime Utility", "vendor": "Apache Software Foundation", "versions": [{"lessThanOrEqual": "1.6.3", "status": "affected", "version": "1.6.0", "versionType": "semver"}]}], "source": "security@apache.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*", "matchCriteriaId": "EA9E0925-829F-4132-93E6-CFEBF72E5DA0", "versionEndIncluding": "1.6.3", "versionStartIncluding": "1.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.\n\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3"}, {"lang": "es", "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando SQL (\u2019Inyecci\u00f3n SQL\u2019) en Apache Portable Runtime Utility a trav\u00e9s del proveedor apr_dbd_oracle.\n\nEste problema afecta a Apache Portable Runtime Utility: desde 1.6.0 hasta 1.6.3"}], "id": "CVE-2026-34191", "lastModified": "2026-10-24T16:10:00.153", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34191", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-06T15:27:40.758050Z", "version": "2.0.3"}}]}, "published": "2026-08-06T15:16:54.650", "references": [{"source": "security@apache.org", "tags": ["Mailing List", "Vendor Advisory"], "url": "https://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2026/08/06/10"}], "sourceIdentifier": "security@apache.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security@apache.org", "type": "Secondary"}]}

{"bugzilla": {"description": "apr-util: Apache Portable Runtime Utility: SQL Injection via apr_dbd_oracle", "id": "2512075", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512075"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-89", "details": ["Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3", "A flaw was found in Apache Portable Runtime Utility. This vulnerability, known as SQL Injection, occurs in the `apr_dbd_oracle` provider. A remote attacker could exploit this by injecting malicious SQL commands, potentially leading to unauthorized access, modification, or deletion of data within the database."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-34191", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "apr-util", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "apr-util", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "apr-util", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "apr-util", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "apr-util", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "package_name": "apr-util", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-08-06T14:32:24Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-34191\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34191\nhttps://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf"], "statement": "Red Hat products are not affected by this flaw. The vulnerability is specific to the apr_dbd_oracle database driver module in the Apache Portable Runtime Utility (apr-util), which provides Oracle database connectivity. Red Hat does not build apr-util with Oracle database support enabled, so the vulnerable code is not present in any shipped Red Hat package.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.6.0,1.6.3]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Apache Portable Runtime Utility", "source": "cna", "vendor": "Apache Software Foundation"}, "product": "portable_runtime_utility", "vendor": "apache"}], "created": "2026-08-06T15:30:04.021447+00:00", "updated": "2026-08-07T01:45:05.274364+00:00", "vendors": ["apache", "apache$PRODUCT$portable_runtime_utility"]}