Oracle Linux Vulnerabilities Allow Admin Control via Chained Flaws

Linuxsecurity

Oracle Linux Vulnerabilities Allow Admin Control via Chained Flaws

First seen 14 Sep 2026, 16:02 UTC • •60.8

Article Content

1 / 3

Browse articles

ThreatCluster •September 15, 2026 at 15:36 UTC

•Two critical vulnerabilities in Oracle Linux allow admin control via FreeRDP and GStreamer.
•CVE-2026-55193 and CVE-2026-85150 require immediate patching to mitigate risks.
•Affected systems include multiple versions of Oracle Linux and associated packages.

Oracle Linux has released important fixes for two vulnerabilities, CVE-2026-55193 and CVE-2026-85150, affecting FreeRDP and GStreamer respectively. CVE-2026-55193, published on 2026-08-19, allows attackers to gain admin control through chained flaws related to RPC gateway checks. CVE-2026-85150, published on 2026-09-03, involves a crash in RTSP authentication credential parsing, also enabling potential admin access. Both vulnerabilities affect multiple versions of Oracle Linux and associated packages. Users are urged to check their versions and apply the necessary updates immediately. The vulnerabilities have been classified as important and moderate, respectively, indicating a significant risk to affected systems. The patches are available for various architectures, including x86_64 and aarch64.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 51d ago How this analysis works

Timeline

2026-08-19

CVE-2026-55193 published

Oracle disclosed a vulnerability in FreeRDP allowing admin control through RPC flaws.

2026-09-03

CVE-2026-85150 published

Oracle released details on a vulnerability in GStreamer that allows admin access via RTSP credential parsing.

2026-09-14

Patches released for both CVEs

Oracle Linux released updates for FreeRDP and GStreamer to address the vulnerabilities.

More articles in this cluster (2)

Threat Graph

8 entities, 10 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Vulnerability (2)

CVE-2026-55193
CVE-2026-85150

Affected Platform (6)

Artifactory
FreeRDP
GStreamer
Oracle Linux
Oracle Linux 10
RHEL

Relationships

CVE-2026-55193 targets Artifactory
CVE-2026-55193 targets FreeRDP
CVE-2026-55193 targets GStreamer
CVE-2026-55193 targets Oracle Linux
CVE-2026-85150 targets Artifactory
CVE-2026-85150 targets FreeRDP
CVE-2026-85150 targets GStreamer
CVE-2026-85150 targets Oracle Linux
CVE-2026-55193 related to Oracle Linux 10
CVE-2026-55193 related to RHEL

Following this threat?

Track CVE-2026-55193 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…

Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…