EIP-2026-102939

This exploit leverages insecure file handling and environment variable trust in Oracle's suid executables (e.g., cmctl) to create a setuid shell owned by the 'oracle' user. It manipulates ORACLE_HOME and ORAHOME to redirect file operations and execute arbitrary commands.