What is the CVSS score of EUVD-2026-79385?

EUVD-2026-79385 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Which versions of Oracle Internet Directory are affected by EUVD-2026-79385?

Oracle Internet Directory versions 12.2.1.4.0 and 14.1.2.1.0 carry a critical takeover vulnerability that lets a low-privileged, network-positioned attacker gain full control of the directory, and no…

How to fix or mitigate EUVD-2026-79385?

Within the first 24 hours, inventory every Oracle Internet Directory instance and confirm whether it runs 12.2.1.4.0 or 14.1.2.1.0, then immediately restrict network reachability to LDAP/LDAPS ports (389, 636, and any administrative LDAP ports) so that only trusted application hosts can reach them, and enable bind and audit logging. Within 7 days, review all LDAP accounts and service principals for least privilege, rotate credentials for directory service and administrative accounts, disable anonymous and unnecessary binds, enforce LDAPS/TLS for all directory traffic, and deploy monitoring or alerting for anomalous bind patterns and directory modifications from low-privileged accounts while engaging Oracle support for a patch timeline. Within 30 days, apply the vendor patch as soon as Oracle releases it for 12.2.1.4.0 and 14.1.2.1.0 following validation in a non-production environment, complete network segmentation of directory services from general user networks, and fold the directory into continuous vulnerability and privileged-access review so dependent applications are reassessed for exposure.

Oracle Internet Directory EUVD-2026-79385

| CVE-2026-83057 CRITICAL

2026-09-15 secalert_us@oracle.com

GHSA-fhfg-g2vc-6p9p

Information Disclosure Oracle

9.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 21:55 vuln.today

CVE Published

Sep 15, 2026 - 20:18 nvd

CRITICAL 9.9

DescriptionNVD

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory. While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

AnalysisAI

Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 can be taken over by a low-privileged attacker with network access to the OID LDAP server, an easily exploitable condition that Oracle rates at CVSS 3.1 base 9.9. The vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) indicates no user interaction is needed, only a low-privileged LDAP-reachable position, and that the scope change lets the impact extend beyond OID to dependent products, with full loss of confidentiality, integrity and availability on the directory itself. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Vulnerability AssessmentAI

Risk Assessment

This is a genuine high-priority issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.

Remediation

The primary action is to apply the Oracle Fusion Middleware patch identified in the vendor security alert at https://www.oracle.com/security-alerts/cspusep2026.html; no exact fix version or patch number is present in the provided intelligence, so version-specific fix details must be confirmed directly against that advisory rather than assumed. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within the first 24 hours, inventory every Oracle Internet Directory instance and confirm whether it runs 12.2.1.4.0 or 14.1.2.1.0, then immediately restrict network reachability to LDAP/LDAPS ports (389, 636, and any administrative LDAP ports) so that only trusted application hosts can reach them, and enable bind and audit logging. …

Threat intelligence, references, and detailed analysis are available after sign-in.