CVE-2026-35249 | Oracle VM VirtualBox 7.2.6 Core improper authorization

April 22, 2026 Yanac

A vulnerability, which was classified as critical, was found in Oracle VM VirtualBox 7.2.6. This vulnerability affects unknown code of the component Core. Such manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-35249. An attack has to be approached locally. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More