[NEW] [high] Oracle VM VirtualBox: Multiple vulnerabilities
A remote, anonymous or authenticated attacker can exploit multiple vulnerabilities in Oracle VM VirtualBox to compromise confidentiality, integrity and availability.
CSIRTS triage
- What
- Multiple vulnerabilities in Oracle VM VirtualBox allow remote attackers to compromise confidentiality, integrity, and availability.
- Who is affected
- Systems running affected versions of Oracle VM VirtualBox with remote or authenticated access enabled.
- Urgency
- High severity with no current exploitation; prioritize if VirtualBox is exposed to untrusted networks.
- Action
- Apply the latest Oracle VM VirtualBox security patches from Oracle's official updates.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch VM VirtualBox
Get an email when a new VM VirtualBox advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2898
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownMultiple vulnerabilities in Oracle Virtualization (August 19, 2026)cert-fr-avis
- mediumCVE-2026-71151: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- highCVE-2026-71141: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- lowCVE-2026-71140: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- mediumCVE-2026-71139: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- highCVE-2026-71138: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- mediumCVE-2026-71137: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- highCVE-2026-71136: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- mediumCVE-2026-71135: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- mediumCVE-2026-71134: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- mediumCVE-2026-71132: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
- highCVE-2026-71131: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd
Recent advisories for Oracle VM VirtualBox
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- mediumCVE-2026-71151: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd · 2026-08-18
- highCVE-2026-71141: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd · 2026-08-18
- lowCVE-2026-71140: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd · 2026-08-18
- mediumCVE-2026-71139: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd · 2026-08-18
- highCVE-2026-71138: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd · 2026-08-18
- mediumCVE-2026-71137: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). …nvd · 2026-08-18
More from CERT-Bund (BSI) Security Advisories
- high[NEW] [high] Joomla: Multiple vulnerabilities2026-08-19
- medium[NEW] [medium] Axis Axis OS: Multiple vulnerabilities2026-08-19
- medium[NEW] [medium] CPython: Multiple vulnerabilities2026-08-19
- high[NEW] [high] Atlassian Products (Bamboo, Bitbucket, Confluence, Crucible, Fisheye, and Jira): Multiple vulnera…2026-08-19
- high[NEW] [high] Microsoft Developer Tools: Multiple Vulnerabilities2026-08-19