A flaw in the PL/SQL package of Oracle Trusted Answer Search allows an attacker with low privilege and remote access via Oracle Net to execute arbitrary code. The vulnerability is a misimplementation of access control within the PL/SQL package, identified as CWE-284, which permits privilege escalation through crafted inputs. Successful exploitation can lead to full takeover of the Trusted Answer Search component, resulting in a complete compromise of confidentiality, integrity, and availability.

Oracle Trusted Answer Search version 26.1 is the only explicitly identified vulnerable variant. The issue resides in the core PL/SQL package and may extend its impact to other Oracle products that interact with or depend on Trusted Answer Search, though no additional products are listed as affected in the current data.

The CVSS v3.1 base score of 9.9 classifies this as a critical vulnerability, while the EPSS figure of less than 1% indicates a very low yet non‑zero probability of exploitation. It is not listed in the CISA KEV catalog. Attacks require network reachability to the Oracle Net listener and only a low privilege level, meaning that any host exposing Trusted Answer Search to the network could be vulnerable. The expected attack path involves sending a specially crafted PL/SQL command over Oracle Net that exploits the package defect to run code with the service’s privileges.