{"id":"CVE-2026-34311","title":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera)","summary":"Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera).  Supported versions that are affected are 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and  5.6.28. Easily exploit…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","vendor":"oracle","product":"hospitality_opera_5_property_services","affected":["hospitality_opera_5_property_services = 5.6.19.24","hospitality_opera_5_property_services = 5.6.22","hospitality_opera_5_property_services = 5.6.25.19","hospitality_opera_5_property_services = 5.6.27.6","hospitality_opera_5_property_services = 5.6.28"],"published":"2026-05-28","updated":"2026-10-14","sourceUpdated":"2026-10-14T20:10:00.190","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-34311","references":[{"url":"https://www.oracle.com/security-alerts/cspumay2026.html","label":"secalert_us@oracle.com"}],"tags":["nvd"],"epss":0.00549,"epssPercentile":0.446,"ingestedAt":"2026-10-14T20:53:12.344Z","slug":"CVE-2026-34311","body":"## Overview\n\nVulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera).  Supported versions that are affected are 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and  5.6.28. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services.  Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\n## Affected\n\n- `hospitality_opera_5_property_services = 5.6.19.24`\n- `hospitality_opera_5_property_services = 5.6.22`\n- `hospitality_opera_5_property_services = 5.6.25.19`\n- `hospitality_opera_5_property_services = 5.6.27.6`\n- `hospitality_opera_5_property_services = 5.6.28`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}