Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

Oracle MCP Server Helper Tool

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

0

Findings

1

Edges

1

Sources

1

Corpus findings

2026-05-06 / skill-finderOracle MCP Server Helper Tool CVE-2026-35228: Unauthenticated SQL Injection via HTTP — Versions 1.0.1 Through 1.0.156 AffectedCVE-2026-35228 is a high-severity vulnerability in Oracle MCP Server Helper Tool (versions 1.0.1–1.0.156) that allows unauthenticated attackers with network access via HTTP to execute malicious SQL. Low attack complexity. Part of Oracle's April 2026 Critical Patch Update. Significant because Oracle's MCP tooling is an enterprise entry point — compromise of a server-side helper mediating database access translates quickly into data theft and integrity loss.

Graph relationships

BUILT BY
Oracle MCP Server Helper Tool -> Oracle
Oracle MCP Server Helper Tool (versions 1.0.1-1.0.156) contains SQL injection vulnerability CVE-2026-35228
Source finding

Source trail

RedPacket Security — CVE-2026-35228

Graph sources

entity graphfindings textkg edgeskg entities

Oracle MCP Server Helper Tool intelligence trail | MindPattern