What is the CVSS score of CVE-2026-46779?

CVE-2026-46779 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of Oracle WebCenter Enterprise Capture are affected by CVE-2026-46779?

Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 and 14.1.2.0.0 are vulnerable to complete system takeover by authenticated remote attackers with low-privileged access; no public exploit…

How to fix or mitigate CVE-2026-46779?

Within 24 hours: Inventory all instances of Oracle WebCenter Enterprise Capture running versions 12.2.1.4.0 or 14.1.2.0.0 and disable or restrict network access to T3 protocol endpoints from untrusted networks. Within 7 days: Implement network segmentation to isolate affected systems from critical infrastructure and deploy enhanced monitoring and alerting on T3 endpoint access attempts. Within 30 days: Contact Oracle for patch release timeline, evaluate migration to patched versions (13.x or later if available), or implement compensating control framework if patching timeline exceeds risk tolerance.

Oracle WebCenter Enterprise Capture CVE-2026-46779

EUVD-2026-37297 CRITICAL

Improper Access Control (CWE-284)

2026-06-16 oracle

Oracle Oracle Webcenter Enterprise Capture Authentication Bypass

9.9

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

9.9 CRITICAL

T3 is network-reachable (AV:N) and easily exploitable (AC:L) per Oracle, requires a low-privileged account (PR:L), no user interaction, and scope change with full CIA impact on Capture and adjacent products.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 16, 2026 - 23:08 vuln.today

DescriptionCVE.org

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3 to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

AnalysisAI

Takeover of Oracle WebCenter Enterprise Capture is achievable by a low-privileged remote attacker via the T3 protocol in the Client Bundle component, affecting versions 12.2.1.4.0 and 14.1.2.0.0. The flaw carries a CVSS 3.1 base score of 9.9 with a scope change, meaning successful exploitation can significantly impact additional adjacent products beyond the vulnerable component. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Obtain low-privileged WebLogic credential

Delivery

Reach T3 listener on Capture host

Exploit

Invoke crafted Client Bundle call

Execution

Escape Capture component scope

Impact

Take over WebCenter Capture and adjacent products

Access

Obtain low-privileged WebLogic credential

Delivery

Reach T3 listener on Capture host

Exploit

Invoke crafted Client Bundle call

Execution

Escape Capture component scope

Impact

Take over WebCenter Capture and adjacent products

Vulnerability AssessmentAI

Exploitation	Attacker needs network reachability to the WebCenter Capture host's T3 (or T3s) protocol listener on WebLogic and valid credentials for any low-privileged WebCenter Capture or WebLogic account (PR:L), with no user interaction required. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Risk is high in environments where T3 is reachable: CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H yields 9.9, driven by network reach, low complexity, no user interaction, and scope change with full impact on confidentiality, integrity, and availability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker who has obtained any low-privileged WebLogic account - for example through phishing of a Capture operator or reuse of a leaked service credential - connects to the WebCenter Capture host's T3 listener over the network and invokes a crafted Client Bundle operation that escapes the Capture component's scope to compromise the underlying WebLogic domain. The result is full takeover of the Capture deployment and significant impact on adjacent Fusion Middleware components hosted in the same domain. …
Remediation	Apply the fixes published in Oracle's June 2026 Critical Patch Update at https://www.oracle.com/security-alerts/cspujun2026.html for both 12.2.1.4.0 and 14.1.2.0.0 deployments; exact patched version strings are not enumerated in the input and should be taken from the CPU matrix. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Inventory all instances of Oracle WebCenter Enterprise Capture running versions 12.2.1.4.0 or 14.1.2.0.0 and disable or restrict network access to T3 protocol endpoints from untrusted networks. …

Threat intelligence, references, and detailed analysis are available after sign-in.