Oracle WebCenter Capture CVE-2026-83006

Exploitation requires an authenticated attacker holding high-privilege access to the target Oracle WebCenter Enterprise Capture instance (CVSS PR:H), reachable over HTTP against the Client Bundle component. Only versions 12.2.1.4.0 and 14.1.2.0.0 are affected. No user interaction is needed (UI:N) and attack complexity is low (AC:L), but the high-privilege requirement is the principal limiting factor - this is not exploitable by an anonymous or low-privileged remote attacker. The scope change (S:C) means a successful attack can affect resources beyond the Capture component itself.

This is a genuinely high-severity issue by CVSS (9.1) with full confidentiality, integrity and availability impact and a scope change (S:C), meaning a compromise of WebCenter Enterprise Capture can pivot to impact other Fusion Middleware components. However, the single most important tempering signal is PR:H - the CVSS vector itself requires the attacker to already hold high privileges on the target, which sharply limits the realistic attacker population to insiders or those who have already obtained privileged credentials. Corroborating this, EPSS is low (0.46%, 39th percentile), there is no CISA KEV listing and no public exploit code identified, so despite the near-critical score this is not a mass-exploitation candidate. No SSVC decision data was provided. Net: a real patch-priority item for organizations running the affected WebCenter Capture versions because of the total-compromise-plus-scope-change potential, but the high-privilege prerequisite and absence of exploitation signals place it below internet-facing pre-auth criticals. Note the 'Authentication Bypass' tag conflicts with the CVSS vector (PR:H = privilege required), so treat the tag as inaccurate rather than as evidence of an unauthenticated bypass.

An attacker who already possesses high-privilege credentials to an Oracle WebCenter Enterprise Capture 12.2.1.4.0 or 14.1.2.0.0 instance sends crafted HTTP requests exploiting the access-control weakness in the Client Bundle component to take over the application. Because the flaw carries a scope change, the compromise can extend beyond Capture into other integrated Fusion Middleware products. No public proof-of-concept exists at time of analysis.