Oracle Coherence EUVD-2026-46723

Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 contain a critical flaw enabling complete remote takeover by unauthenticated attackers via HTTP, risking total loss of confidentiality, integrity, and availability. Organizations running affected versions face immediate threat to cached data, application availability, and operational security without vendor-supplied patches.

Within 24 hours: conduct inventory of systems running Coherence 14.1.x and 15.1.1.0.0, document their network exposure, and implement network-layer access controls restricting HTTP connectivity to authorized internal subnets only. Within 7 days: confirm network segmentation is in place, enable detailed logging and alerting for anomalous Coherence API and caching activity, and escalate to Oracle support to obtain patch timeline and interim security guidance. Within 30 days: implement a WAF with attack-pattern rules if Oracle releases signatures, begin planning for upgrade to a patched version once released, or initiate migration to an alternative distributed caching platform if Oracle cannot provide a credible patch timeline.

No vendor-released patch identified at time of analysis. Interim mitigations include: strict network segmentation restricting Coherence HTTP access to authorized administrative and application systems only; enhanced logging and real-time alerting on unusual API calls and data access patterns; deployment of a Web Application Firewall (WAF) with rules blocking known exploitation vectors once attack signatures become available; and offline backup of critical cached data to enable rapid recovery in case of compromise.