CVE-2026-35247 | Oracle VM VirtualBox 7.2.6 Core improper authorization

April 22, 2026 Yanac

A vulnerability described as critical has been identified in Oracle VM VirtualBox 7.2.6. Affected is an unknown function of the component Core. Executing a manipulation can lead to improper authorization.

This vulnerability is registered as CVE-2026-35247. The attack needs to be launched locally. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More