Authentication Bypass
Monthly
Complete takeover of Oracle WebLogic Server is possible by unauthenticated remote attackers via HTTP against the Core component, affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Disclosed in Oracle's July 2026 Critical Patch Update with a CVSS 3.1 base score of 9.8 (full confidentiality, integrity and availability impact), the flaw requires no privileges, no user interaction and low attack complexity. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but WebLogic's history as a mass-exploited middleware target makes rapid weaponization likely once details emerge.
Complete compromise of Oracle Coherence (Oracle Fusion Middleware Core component) is possible by unauthenticated remote attackers sending crafted HTTP traffic, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 9.8 and results in full takeover of the Coherence data-grid instance across affected versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit has been identified at time of analysis and the issue is not listed in CISA KEV.
Full product takeover of Oracle Coherence (Fusion Middleware, Core component) is achievable by remote unauthenticated attackers over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact, and Oracle characterizes it as 'easily exploitable' against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivial exploitation profile and complete-compromise outcome make it a top-priority patch.
Remote takeover of Oracle Coherence (Fusion Middleware Core component) lets an unauthenticated attacker with TCP network access fully compromise affected servers (versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0), disclosed in the Oracle Critical Patch Update of July 2026. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity and availability impact and is rated 'easily exploitable' by Oracle, meaning no credentials or user interaction are required. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the trivial exploitation profile makes it a high-priority patching target.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) is possible by remote, unauthenticated attackers over TCP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with High impact to confidentiality, integrity, and availability, and Oracle rates it 'easily exploitable.' There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the combination of network reachability, no authentication, and complete compromise makes it a top-priority patch.
Full compromise of Oracle Coherence (Oracle Fusion Middleware, Core component) allows a remote, unauthenticated attacker to take over the affected server via a crafted HTTP request, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity, and availability impact and is described by Oracle as 'easily exploitable,' affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis, and the CVE is not currently listed in CISA KEV; EPSS data was not provided.
Full takeover of Oracle Coherence is possible when an unauthenticated attacker reaches the product over TCP, per Oracle's July 2026 Critical Patch Update. The flaw affects the Core component across Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, and Oracle rates it CVSS 9.8 with full confidentiality, integrity and availability loss. No public exploit is identified at time of analysis and it is not listed in CISA KEV, but the 'easily exploitable / unauthenticated' characterization makes it a high-priority patch item.
Unauthorized data access in Oracle Coherence (Oracle Fusion Middleware Core component) lets an unauthenticated, network-based attacker read critical data and perform limited unauthorized modification over HTTP. Disclosed in Oracle's July 2026 Critical Patch Update and tagged as an authentication bypass, the flaw carries CVSS 8.2 (C:H/I:L) and affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but Oracle rates it easily exploitable with no privileges required.
Adjacent-network compromise of Oracle Coherence (Oracle Fusion Middleware Core component) lets an unauthenticated attacker on the same physical communication segment read, create, delete, or modify all Coherence-accessible data. Rated CVSS 3.1 8.1, the flaw - tagged as an authentication bypass by the reporter (Oracle) - yields high confidentiality and integrity impact but no availability impact. No public exploit identified at time of analysis and not listed in CISA KEV; disclosed via the Oracle July 2026 Critical Patch Update.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated attacker with network access via HTTP/2 to fully compromise affected versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw yields complete confidentiality, integrity, and availability loss (CVSS 3.1 base 9.8) and was disclosed by Oracle in the July 2026 Critical Patch Update. No public exploit identified at time of analysis, but the network-reachable, no-privilege, no-interaction profile makes it a top-priority patching target.
Remote unauthenticated takeover in Oracle Coherence (Oracle Fusion Middleware, Core component) allows an attacker with only HTTP network access to fully compromise the product across supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle rates this 9.8 (Critical) with full confidentiality, integrity, and availability impact and describes it as easily exploitable, meaning no authentication, credentials, or user interaction are needed. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the combination of unauthenticated network reach and complete compromise makes this a high-priority patch item.
Full remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) versions 12.2.1.4.0 and 14.1.1.0.0 is possible by an unauthenticated attacker sending crafted traffic over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity, and availability impact and is rated by Oracle as 'easily exploitable,' meaning no special skill or configuration is needed. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, no-authentication profile makes it a high-priority patch target.
Full takeover of Oracle Coherence is possible by an unauthenticated remote attacker over TCP, per Oracle's July 2026 Critical Patch Update. The flaw affects the Core component across Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, and yields complete loss of confidentiality, integrity and availability (CVSS 3.1 8.1). Exploitation is rated high-complexity, and no public exploit has been identified at time of analysis.
Complete takeover of Oracle Coherence is possible when an unauthenticated remote attacker reaches the Core component over HTTPS, per Oracle's July 2026 Critical Patch Update. Affected supported releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, and the CVSS 3.1 base score of 9.8 reflects full confidentiality, integrity, and availability compromise with no privileges or user interaction. No public exploit identified at time of analysis, but the low attack complexity and 'easily exploitable' framing from Oracle make this a high-priority patch.
Full takeover of Oracle Coherence (Core component) in Oracle Fusion Middleware allows an unauthenticated attacker to remotely compromise affected instances over HTTP, impacting confidentiality, integrity, and availability. Oracle rates this CVSS 9.8 and describes it as easily exploitable against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit is identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and absence of any authentication requirement make it a top-tier patching priority.
Complete takeover of Oracle Coherence, the in-memory data grid within Oracle Fusion Middleware, is possible for a remote unauthenticated attacker who can reach the product over TCP, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) reflects that no authentication or user interaction is required and that a successful attack fully compromises confidentiality, integrity and availability. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV, but Oracle rates it 'easily exploitable,' making it a high-priority patch in the July 2026 Critical Patch Update.
Full takeover of Oracle Coherence is possible when a remote, unauthenticated attacker reaches the product over TCP and successfully exploits a hard-to-trigger flaw in the Core component, yielding high confidentiality, integrity, and availability impact (CVSS 3.1 8.1). Affected supported releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, all addressed in Oracle's July 2026 Critical Patch Update. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Full compromise of Oracle Coherence, the in-memory data grid within Oracle Fusion Middleware (Core component), is possible by remote unauthenticated attackers over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 and Oracle describes it as easily exploitable, allowing complete takeover with high confidentiality, integrity, and availability impact. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV.
Remote takeover of Oracle Coherence (Core component) allows an unauthenticated attacker with TCP network access to fully compromise the in-memory data grid, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact and no required privileges or user interaction. No public exploit identified at time of analysis, but the trivial exploitability and full-takeover impact make this a high-priority patch for affected Fusion Middleware deployments.
Full takeover of Oracle Coherence (Fusion Middleware Core component) is possible by a low-privileged attacker with TCP network access to an affected instance, per Oracle's July 2026 Critical Patch Update. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, carrying a CVSS 3.1 base score of 8.8 with high confidentiality, integrity and availability impact. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV, but the 'easily exploitable' rating combined with complete-compromise impact makes it a priority patch.
Data compromise in Oracle Coherence (Oracle Fusion Middleware Core component) lets an unauthenticated attacker with network access via TLS read, create, delete, or modify all Coherence-accessible data. Oracle rates it 9.1 (CVSS 3.1) with high confidentiality and integrity impact but no availability impact, and the intelligence tags flag it as an authentication bypass. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated data disclosure in Oracle Coherence (Oracle Fusion Middleware, Core component) versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 lets a remote attacker with only TCP network access read or fully access all Coherence-managed data. Oracle rates it CVSS 3.1 7.5 with confidentiality-only impact and classifies it as easily exploitable; the 'Authentication Bypass' tag indicates the flaw circumvents access controls to expose cluster data. No public exploit identified at time of analysis, and no EPSS or CISA KEV signal is present in the provided data.
Remote takeover of Oracle Coherence (Fusion Middleware Core component) allows an unauthenticated network attacker to fully compromise the affected instance over TCP, per Oracle's July 2026 Critical Patch Update. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, all carrying a CVSS 3.1 base score of 9.8 with full confidentiality, integrity and availability impact. No public exploit identified at time of analysis and the issue is not listed in CISA KEV, but the 'easily exploitable / unauthenticated / network' profile makes it a high-priority patch item.
Full compromise of Oracle Coherence (Core component) is possible for an unauthenticated attacker who can reach the cluster's physical communication segment, per Oracle's July 2026 Critical Patch Update. Affected releases 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 can be taken over completely, yielding high confidentiality, integrity, and availability impact (CVSS 8.8, AV:A). No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but Oracle rates it 'easily exploitable' with no privileges or user interaction required.
Full compromise of Oracle Coherence (Oracle Fusion Middleware Core component) is possible by a remote, unauthenticated attacker over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 9.8 and Oracle rates it 'easily exploitable,' with successful attacks resulting in complete takeover of the Coherence instance (full confidentiality, integrity, and availability loss). No public exploit has been identified at time of analysis, but the low attack complexity and lack of authentication make it a high-priority patch.
Remote takeover of Oracle Coherence (Core component of Oracle Fusion Middleware) allows an unauthenticated attacker with TCP network access to fully compromise the affected data-grid instance across versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates it "easily exploitable" with a CVSS 3.1 base score of 9.8 and full confidentiality, integrity and availability impact. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, no-authentication profile makes it a high-priority patch target.
Full remote takeover of Oracle Coherence (Core component of Oracle Fusion Middleware) is achievable by an unauthenticated network attacker in supported releases 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates the flaw CVSS 9.8 and describes it as 'easily exploitable' over TCP with no user interaction, yielding complete compromise of confidentiality, integrity and availability. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the low attack complexity and unauthenticated network vector make it a top-priority patch from the July 2026 Critical Patch Update.
Full compromise of Oracle Coherence (Fusion Middleware Core component) is achievable by an unauthenticated remote attacker over TCP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 9.8 rating and permits complete takeover with high confidentiality, integrity, and availability impact against versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit identified at time of analysis, and it is not listed in CISA KEV; however, the low attack complexity and unauthenticated network vector make it a high-priority patch target.
Denial of service and data tampering in Oracle Coherence (Oracle Fusion Middleware, Core component) lets a remote unauthenticated attacker with TCP network access hang or repeatedly crash the in-memory data grid and perform unauthorized update, insert, or delete of some accessible data. Oracle rates it CVSS 3.1 8.2 and describes it as 'easily exploitable', reflecting no authentication and low attack complexity. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated remote takeover of Oracle Coherence (a component of Oracle Fusion Middleware, Core component) lets a network attacker with only TCP connectivity fully compromise the affected instance, per Oracle's July 2026 Critical Patch Update. Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 are affected, and the CVSS 3.1 base score of 9.8 reflects complete loss of confidentiality, integrity and availability. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, but the 'easily exploitable / unauthenticated' framing makes it a high-priority patch.
Full compromise of Oracle Coherence, the in-memory data grid component of Oracle Fusion Middleware (Core), allows an unauthenticated remote attacker with only TCP network access to take over the affected instance. Rated CVSS 3.1 9.8 with high confidentiality, integrity, and availability impact, it affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, and was disclosed by Oracle in the July 2026 Critical Patch Update. No public exploit identified at time of analysis, and it is not listed in CISA KEV; no EPSS score was provided in the input.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated attacker with TCP network access to fully compromise the product across supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates this CVSS 9.8 with high confidentiality, integrity, and availability impact, and describes it as 'easily exploitable,' meaning no authentication, user interaction, or special conditions are required. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivial exploitability and complete-takeover impact make it a high-priority patch in the July 2026 Oracle Critical Patch Update.
Full compromise of Oracle Coherence (Oracle Fusion Middleware Core) is possible by unauthenticated attackers with TCP network access, per Oracle's July 2026 Critical Patch Update. The flaw is rated CVSS 9.8 and described by Oracle as 'easily exploitable,' allowing complete takeover of the in-memory data grid across supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated network-takeover profile makes it a high-priority patch.
Full compromise of Oracle Coherence (Oracle Fusion Middleware, Core component) is possible for a low-privileged attacker positioned on the same physical/logical network segment as the host, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.0 with a scope change, meaning successful exploitation not only results in takeover of Coherence itself but can significantly impact other products sharing the environment. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware Core component) affects versions 12.2.1.4.0 and 14.1.1.0.0, allowing an unauthenticated attacker with only HTTP network access to fully compromise the product. Rated CVSS 3.1 9.8 with high confidentiality, integrity, and availability impact, Oracle describes the flaw as easily exploitable and resulting in complete Coherence takeover. Addressed in the Oracle Critical Patch Update of July 2026; no public exploit identified at time of analysis and it is not currently listed in CISA KEV.
Complete takeover of Oracle Coherence is possible by unauthenticated remote attackers over TCP against the Core component in Oracle Fusion Middleware versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates this 'easily exploitable' with full confidentiality, integrity, and availability compromise (CVSS 9.8), fixed in the July 2026 Critical Patch Update. No public exploit identified at time of analysis and the flaw is not on CISA KEV, so exploitation is currently theoretical but the barrier is minimal.
Privilege escalation with scope change in Oracle Coherence (Oracle Fusion Middleware Core component) lets a low-privileged attacker with local logon access compromise the confidentiality and integrity of all Coherence-accessible data and impact additional products beyond Coherence itself. Oracle rates it CVSS 3.1 7.2, but the attack is hard to execute: it requires an existing account, high attack complexity, and human interaction from a separate victim. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the fix ships in Oracle's July 2026 Critical Patch Update.
Full remote takeover of Oracle Coherence (part of Oracle Fusion Middleware, Core component) in versions 12.2.1.4.0 and 14.1.1.0.0 is achievable by an unauthenticated attacker with only HTTP network access, per the CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N with High Confidentiality, Integrity, and Availability impact (base score 9.8). Oracle rates it 'easily exploitable' and describes the outcome as complete compromise of Coherence. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivial-access profile makes it a high-priority patch in the Oracle July 2026 Critical Patch Update.
Full remote takeover in Oracle Coherence 12.2.1.4.0 and 14.1.1.0.0 (Fusion Middleware Core component) allows an unauthenticated network attacker to compromise the in-memory data grid over HTTP with no user interaction. Rated CVSS 3.1 9.8 with high confidentiality, integrity, and availability impact, it was disclosed in Oracle's July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the 'easily exploitable, unauthenticated' profile makes it a prime patching priority.
Remote code execution and full takeover in Oracle Coherence (Oracle Fusion Middleware, Core component) versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 allows an unauthenticated attacker with HTTP network access to completely compromise the product, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity, and availability impact and is described by Oracle as easily exploitable. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated network vector and 'takeover' impact make it a top-priority patch candidate.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated attacker with TCP network access to fully compromise the product across supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates this 'easily exploitable' with complete confidentiality, integrity and availability loss (CVSS 9.8), disclosed in the July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated network-facing nature makes it a high-priority patch.
Authentication bypass and data compromise in Oracle Coherence (Oracle Fusion Middleware Core component) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 allows a low-privileged, network-adjacent attacker to read, create, delete or modify all Coherence-accessible data over HTTP. Because the flaw carries a scope change, successful exploitation can significantly impact additional products beyond Coherence itself, yielding a CVSS 3.1 score of 9.6. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and low privilege requirement make it a high-priority patch item.
Full takeover of Oracle Coherence (an in-memory data grid within Oracle Fusion Middleware) is achievable by an unauthenticated remote attacker over TCP, per Oracle's July 2026 Critical Patch Update. The flaw affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, and carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and lack of authentication make it a high-priority patch item.
Denial-of-service with data tampering in Oracle Coherence 15.1.1.0.0 (Fusion Middleware Core) lets an unauthenticated network attacker hang or repeatedly crash the in-memory data grid over TCP, while also gaining limited unauthorized read and write access to a subset of grid-managed data. Rated CVSS 3.1 8.6 by Oracle and described as 'easily exploitable,' the flaw requires no authentication or user interaction. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Remote takeover of Oracle Coherence (a component of Oracle Fusion Middleware) allows an unauthenticated attacker with TCP network access to fully compromise the affected in-memory data grid, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H) reflects complete loss of confidentiality, integrity, and availability with no authentication or user interaction required. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the 'easily exploitable' framing and full-impact vector make this a high-priority patch across affected versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) can be achieved by unauthenticated remote attackers sending crafted HTTP traffic, affecting versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle rates this CVSS 9.8 with complete confidentiality, integrity, and availability loss, and describes it as 'easily exploitable,' meaning no authentication, user interaction, or special preconditions are required. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV.
Remote unauthenticated compromise of Oracle Coherence (a component of Oracle Fusion Middleware) allows attackers with only network TCP access to fully take over the affected instance, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 9.8 and affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit identified at time of analysis, but the trivial exploitability (AV:N/AC:L/PR:N/UI:N) and full confidentiality, integrity, and availability impact make this a high-priority patch item.
Remote takeover of Oracle Coherence (Core component) in Oracle Fusion Middleware allows an unauthenticated attacker with only TCP network access to fully compromise the in-memory data grid, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score is 9.8 with high confidentiality, integrity, and availability impact, and Oracle rates it 'easily exploitable.' No public exploit has been identified at time of analysis and the flaw is not listed in CISA KEV, but the combination of no authentication and full-system takeover makes it a top-priority patch.
Complete takeover of Oracle Coherence is possible when an unauthenticated attacker with network access over TCP reaches the Core component, yielding full confidentiality, integrity, and availability compromise (CVSS 9.8). The flaw affects Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 shipped as part of Oracle Fusion Middleware, and is addressed in the Oracle Critical Patch Update of July 2026. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Full remote takeover of Oracle Coherence (Fusion Middleware Core component) allows an unauthenticated attacker with only TCP network access to fully compromise the in-memory data grid, per Oracle's July 2026 Critical Patch Update. Oracle rates it 'Easily exploitable' with a CVSS 3.1 base score of 9.8 (C:H/I:H/A:H), meaning a successful attack yields complete confidentiality, integrity, and availability compromise. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV, but the low-complexity, no-authentication profile makes it a high-priority patch.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) is achievable by unauthenticated attackers with only TCP network reachability to the affected service. Per the CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N) and Oracle's own 'easily exploitable' rating, an attacker needs no credentials or user interaction to gain complete control over confidentiality, integrity, and availability (9.8). At time of analysis there is no public exploit identified and the CVE is not listed in CISA KEV, so exploitation is not confirmed; the fix ships in the Oracle Critical Patch Update of July 2026.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) is achievable by unauthenticated remote attackers over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity, and availability impact, and Oracle explicitly rates it 'easily exploitable' against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the combination of no authentication, low complexity, and complete-takeover impact makes it a top-priority patch.
Remote takeover of Oracle Coherence (Core component of Oracle Fusion Middleware) allows an unauthenticated attacker with TCP network access to fully compromise the affected instance, per Oracle's July 2026 Critical Patch Update. The flaw carries a 9.8 CVSS and impacts confidentiality, integrity and availability of Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. No public exploit has been identified at time of analysis, but the network-reachable, no-authentication profile makes it a high-priority patch.
Denial-of-service in Oracle Coherence (Core component of Oracle Fusion Middleware) lets an unauthenticated attacker with TCP network access hang or repeatably crash the data-grid service, producing a complete availability outage. It affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 and is rated CVSS 3.1 7.5 (availability-only). Oracle labels it easily exploitable, but there is no public exploit identified at time of analysis and it is not on CISA KEV.
Complete takeover of Oracle Coherence (Oracle Fusion Middleware Core component) is possible when an unauthenticated attacker reaches an exposed T3 or IIOP listener over the network, affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates this CVSS 3.1 8.1 with full confidentiality, integrity and availability impact but flags it as difficult to exploit (AC:H). There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so risk is currently theoretical but severe if a working exploit emerges.
Complete takeover of Oracle Coherence is possible by an unauthenticated remote attacker over TCP, affecting the Core component in Fusion Middleware versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle rates this 'easily exploitable' with a CVSS 3.1 base score of 9.8 and full confidentiality, integrity, and availability impact. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV, but the low attack complexity and unauthenticated network vector make it a high-priority patch item.
Unauthorized data compromise in Oracle Coherence (Oracle Fusion Middleware Core component) lets an unauthenticated network attacker read and modify all Coherence-accessible data and impact additional products through a scope change, provided a legitimate user is tricked into a required interaction. It affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, carries an Oracle CVSS 3.1 base score of 9.3, and has no public exploit identified at time of analysis. Fixes ship in the Oracle July 2026 Critical Patch Update.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated network attacker to fully compromise affected versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 over TCP. Oracle rates the flaw CVSS 9.8 with full confidentiality, integrity, and availability impact and describes it as "easily exploitable," meaning no authentication, user interaction, or special access is required. No public exploit identified at time of analysis, and the CVE is not currently listed in CISA KEV; remediation is delivered through the Oracle July 2026 Critical Patch Update.
Full takeover of Oracle Coherence is possible over the network in this Oracle Fusion Middleware Core-component flaw affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with TCP network access to a Coherence cluster member can leverage it to fully compromise confidentiality, integrity, and availability (CVSS 8.8). No public exploit identified at time of analysis, and the fix ships in Oracle's July 2026 Critical Patch Update.
Complete takeover of Oracle Coherence is achievable by an unauthenticated remote attacker over TCP, with the Core component of this Oracle Fusion Middleware in-memory data grid affected in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The maximum-severity CVSS 10.0 rating reflects a scope-changing flaw whose exploitation can pivot beyond Coherence to impact other co-deployed products. There is no public exploit identified at time of analysis, but the trivial exploitability and unauthenticated network reach make this a top-priority patch.
Full compromise of Oracle Coherence (Core component) allows an unauthenticated attacker with TCP network access to take over affected installations, per Oracle's July 2026 Critical Patch Update. Oracle rates this CVSS 9.8 with high confidentiality, integrity, and availability impact and describes it as 'easily exploitable,' affecting Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated network vector combined with 'takeover' impact makes this a top-priority patch.
Complete takeover of Oracle Coherence is possible by unauthenticated remote attackers over TCP, per Oracle's July 2026 Critical Patch Update (CVE-2026-60215). The flaw in the Core component carries a CVSS 3.1 score of 9.8 and affects Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, delivering full confidentiality, integrity, and availability compromise. No public exploit identified at time of analysis, and it is not on CISA KEV, but the low attack complexity and lack of authentication make it a high-priority patch.
Adjacent-network compromise of Oracle Coherence (Oracle Fusion Middleware Core component) allows a low-privileged attacker on the same physical communication segment to read and modify all Coherence-accessible data, with a scope change that can significantly impact other products on the host. Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 are affected, carrying a CVSS 3.1 base score of 8.7 (High) with high confidentiality and integrity impact but no availability impact. No public exploit identified at time of analysis; the flaw is tagged as an authentication bypass and is fixed in the Oracle July 2026 Critical Patch Update.
Remote takeover of Oracle Coherence (Core component of Oracle Fusion Middleware) allows an unauthenticated attacker with network TCP access to fully compromise the affected instance across confidentiality, integrity, and availability. Oracle rates this 9.8 and describes it as easily exploitable against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low-complexity, no-authentication profile makes it a high-priority patch item from the July 2026 Critical Patch Update.
Full takeover of Oracle Coherence (Core component) is possible by an unauthenticated attacker positioned on the same physical communication segment as the server, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 8.8 with high impact to confidentiality, integrity and availability, and affects Fusion Middleware deployments running Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.
Complete takeover of Oracle Coherence is possible when an unauthenticated attacker with TCP network access to the Core component exploits an easily-exploitable flaw in versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Disclosed by Oracle in the July 2026 Critical Patch Update, the issue carries a CVSS 9.8 score with full confidentiality, integrity, and availability impact and requires no user interaction. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; however, the low attack complexity and unauthenticated network reachability make it a high-priority patch.
Full takeover of Oracle Coherence (Fusion Middleware Core) is achievable by an unauthenticated remote attacker over TCP, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score is 9.8 with complete confidentiality, integrity, and availability impact against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, no-authentication profile makes it a high-priority patch item.
Remote unauthenticated compromise of Oracle WebLogic Server (Fusion Middleware Core component) lets network attackers read, create, delete, or modify any server-accessible data over HTTP. Tagged as an authentication bypass and scored CVSS 3.1 9.1, it affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 and was disclosed in Oracle's July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the trivial exploitability (AC:L/PR:N/UI:N) makes it a high-priority patch for internet-facing deployments.
Full server takeover in Oracle WebLogic Server (Fusion Middleware Core component) versions 12.2.1.4.0 and 14.1.2.0.0 allows a low-privileged attacker with network HTTP access to fully compromise confidentiality, integrity, and availability of the server. Rated CVSS 3.1 8.8 (High) and disclosed in Oracle's July 2026 Critical Patch Update, the flaw requires only low-level authenticated access and no user interaction, making it attractive for post-authentication lateral movement. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV.
Full server takeover in Oracle WebLogic Server (Fusion Middleware Core component) is achievable by a low-privileged, network-adjacent attacker abusing the SAML authentication path, with a scope change that can propagate impact into additional connected products. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0; the CVSS 9.9 rating reflects complete loss of confidentiality, integrity and availability. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the low complexity and low privilege requirement make it a top-priority patching item.
Full server takeover in Oracle WebLogic Server (Fusion Middleware Core component) affects supported versions 12.2.1.4.0 and 14.1.2.0.0, allowing a remote unauthenticated attacker with only TCP network access to fully compromise the server. The maximum-severity CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H) reflects that successful exploitation yields complete confidentiality, integrity, and availability compromise. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but WebLogic's history as a mass-exploited target makes this a high-priority patch.
Remote takeover of Oracle WebLogic Server (Fusion Middleware, Core component) lets an unauthenticated network attacker fully compromise the server by sending crafted requests over the T3 or IIOP protocols. Oracle rates this 9.8 with full confidentiality, integrity, and availability impact and calls it 'easily exploitable,' affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit is identified at time of analysis and it is not in CISA KEV, but this class of unauthenticated T3/IIOP takeover has historically been rapidly weaponized in WebLogic.
Server takeover in Oracle WebLogic Server (Fusion Middleware Core component) allows a low-privileged, remote attacker with HTTP network access to fully compromise the server, per the Oracle July 2026 Critical Patch Update. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, and Oracle rates the flaw 'easily exploitable' with high confidentiality, integrity and availability impact (CVSS 3.1 8.8). No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and authenticated-network vector make it a high-priority patch item.
Complete server takeover in Oracle WebLogic Server (Fusion Middleware Core component) lets an unauthenticated remote attacker fully compromise affected instances by sending crafted traffic over the T3 or IIOP protocols. It carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact and is described by Oracle as 'easily exploitable.' Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are affected; no public exploit identified at time of analysis and it is not currently listed in CISA KEV.
Remote takeover of Oracle WebLogic Server (Fusion Middleware, Core component) is possible by an unauthenticated attacker sending crafted traffic over the T3 or IIOP protocols against versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle rates it CVSS 3.1 8.1 with full confidentiality, integrity, and availability compromise, but flags high attack complexity (AC:H), meaning the flaw is difficult to exploit despite requiring no authentication. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so this is currently a patch-priority based on impact rather than confirmed exploitation.
Remote takeover of Oracle WebLogic Server (Fusion Middleware Core component) allows an unauthenticated network attacker to fully compromise the server via a crafted SOAP request. Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are affected, and Oracle rates it easily exploitable with complete confidentiality, integrity, and availability impact (CVSS 9.8). No public exploit was identified at time of analysis, but given WebLogic's history as a mass-exploitation target, this warrants immediate patching from the July 2026 Critical Patch Update.
Remote takeover of Oracle WebLogic Server (Fusion Middleware Core component) allows an unauthenticated network attacker to fully compromise the server via HTTP, per Oracle's July 2026 Critical Patch Update. Affected releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, all carrying a maximum-severity CVSS 3.1 score of 9.8 with full confidentiality, integrity and availability impact. No public exploit identified at time of analysis, but WebLogic's history as a repeated exploitation target makes this a high-priority patch.
Complete server takeover in Oracle WebLogic Server (Fusion Middleware, Core component) is possible by unauthenticated attackers who reach the T3 or IIOP remoting protocols over the network. Oracle rates this 9.8 with full confidentiality, integrity, and availability impact and describes it as 'easily exploitable,' meaning any exposed T3/IIOP listener on affected 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, or 15.1.1.0.0 builds can be commandeered without credentials. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the T3/IIOP attack surface has a long history of weaponized deserialization exploits, so patch urgency is high.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated remote attacker with TCP network access to compromise the affected instance, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact, and Oracle rates it 'easily exploitable.' Affected releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full server takeover in Oracle WebLogic Server 12.2.1.4.0 and 14.1.2.0.0 (Core component) allows a high-privileged attacker positioned on the adjacent physical communication segment to compromise the server and, due to a scope change, significantly impact additional connected products. Successful exploitation yields complete loss of confidentiality, integrity, and availability. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV; Oracle addressed it in the July 2026 Critical Patch Update.
Full takeover of Oracle MySQL Connector/Net (versions 9.7.0 and 9.7.1) is possible by a low-privileged network attacker who wins a high-complexity attack, with a scope change that lets the compromise significantly impact products beyond the connector itself. Oracle rates this CVSS 3.1 8.5 with high confidentiality, integrity, and availability impact, and it is addressed in the July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise ("takeover") of Oracle's MySQL Connector/NET client library affects the ADO.NET data provider in MySQL Connectors versions 9.7.0 and 9.7.1, where an unauthenticated network attacker can seize control of the connector, impacting confidentiality, integrity, and availability of any .NET application relying on it. Rated CVSS 3.1 8.1 (High) with high attack complexity, this is a client-side flaw disclosed in Oracle's July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data access and modification in Oracle MySQL Connectors (Connector/C++) versions 9.7.0 through 9.7.1 lets an unauthenticated remote attacker reach and tamper with all data accessible to the connector. The flaw is rated CVSS 7.4 with high confidentiality and integrity impact but no availability impact, and is described by Oracle as difficult to exploit (high attack complexity). No public exploit has been identified at time of analysis and it is not listed in CISA KEV; the fix ships in Oracle's July 2026 Critical Patch Update.
Sensitive-data disclosure and partial denial of service in Oracle Payments (Oracle E-Business Suite File Transmission component, versions 12.2.3 through 12.2.15) lets a low-privileged attacker with HTTP network access read all Oracle Payments-accessible data and partially disrupt the service. Oracle rates it CVSS 3.1 7.1 (C:H/A:L), and intelligence tags flag an authentication-bypass characteristic, though the CVSS vector confirms some privilege is required. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise of Oracle BI Publisher (part of Oracle Analytics, BI Platform Security component) is achievable by a remote, unauthenticated attacker sending crafted HTTP requests, per the CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N scoring 9.8. Affected releases are the 8.2.0.0.0 and 12.2.1.4.0 versions, and Oracle rates successful attacks as resulting in complete takeover of the BI Publisher instance with high confidentiality, integrity and availability impact. There is no public exploit identified at time of analysis and no CISA KEV listing, so risk is currently driven by the ease and severity of the flaw rather than confirmed active exploitation.
Unauthorized data disclosure in Oracle Hospitality Simphony POS (versions 19.8-19.8.5, 19.9-19.9.3, and 19.10) lets a remote, unauthenticated attacker reach all data accessible to the application over HTTP. Oracle rates it CVSS 7.5 with confidentiality-only impact and describes it as 'easily exploitable,' and the vendor tags it as an Authentication Bypass. Disclosed in Oracle's July 2026 Critical Patch Update; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise (takeover) of Oracle Hospitality Simphony is possible when an unauthenticated attacker with network access reaches the POS component over HTTP, affecting supported versions 19.8-19.8.5, 19.9-19.9.3, and 19.10. Oracle rates this CVSS 3.1 8.1 with high confidentiality, integrity, and availability impact, but flags the attack as difficult to exploit (AC:H), meaning success depends on conditions outside the attacker's control such as timing, specific state, or reconnaissance. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the fix ships in Oracle's July 2026 Critical Patch Update.
Data tampering and denial of service in Oracle Hospitality Simphony (POS component) versions 19.8-19.8.5, 19.9-19.9.3 and 19.10 allow a remote unauthenticated attacker to compromise the point-of-sale platform over HTTP. Successful attacks can create, delete or modify all Simphony-accessible critical data and can hang or repeatedly crash the service for a complete denial of service. Rated CVSS 3.1 9.1 with no confidentiality impact; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data disclosure in Oracle Hospitality Simphony (POS component) versions 19.8-19.8.5, 19.9-19.9.3, and 19.10 lets a remote, unauthenticated attacker read all data accessible to the application over HTTP. The flaw, tagged as an authentication bypass, requires no privileges or user interaction and yields high confidentiality impact (CVSS 3.1 base 7.5) with no impact to integrity or availability. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so exploitation status is currently theoretical but the low attack complexity makes it a real patching priority.
Full takeover of Oracle MySQL Server and MySQL Cluster is possible through the Server: Group Replication Plugin, where a local attacker holding only a logon to the host running the database can compromise the instance without any database credentials. The flaw affects MySQL Server 8.4.0-8.4.10 and 9.7.0-9.7.1, plus MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1, and carries a CVSS 3.1 base score of 8.4 with high confidentiality, integrity and availability impact. No public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Complete takeover of Oracle WebLogic Server is possible by unauthenticated remote attackers via HTTP against the Core component, affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Disclosed in Oracle's July 2026 Critical Patch Update with a CVSS 3.1 base score of 9.8 (full confidentiality, integrity and availability impact), the flaw requires no privileges, no user interaction and low attack complexity. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but WebLogic's history as a mass-exploited middleware target makes rapid weaponization likely once details emerge.
Complete compromise of Oracle Coherence (Oracle Fusion Middleware Core component) is possible by unauthenticated remote attackers sending crafted HTTP traffic, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 9.8 and results in full takeover of the Coherence data-grid instance across affected versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit has been identified at time of analysis and the issue is not listed in CISA KEV.
Full product takeover of Oracle Coherence (Fusion Middleware, Core component) is achievable by remote unauthenticated attackers over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact, and Oracle characterizes it as 'easily exploitable' against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivial exploitation profile and complete-compromise outcome make it a top-priority patch.
Remote takeover of Oracle Coherence (Fusion Middleware Core component) lets an unauthenticated attacker with TCP network access fully compromise affected servers (versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0), disclosed in the Oracle Critical Patch Update of July 2026. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity and availability impact and is rated 'easily exploitable' by Oracle, meaning no credentials or user interaction are required. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the trivial exploitation profile makes it a high-priority patching target.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) is possible by remote, unauthenticated attackers over TCP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with High impact to confidentiality, integrity, and availability, and Oracle rates it 'easily exploitable.' There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the combination of network reachability, no authentication, and complete compromise makes it a top-priority patch.
Full compromise of Oracle Coherence (Oracle Fusion Middleware, Core component) allows a remote, unauthenticated attacker to take over the affected server via a crafted HTTP request, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity, and availability impact and is described by Oracle as 'easily exploitable,' affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis, and the CVE is not currently listed in CISA KEV; EPSS data was not provided.
Full takeover of Oracle Coherence is possible when an unauthenticated attacker reaches the product over TCP, per Oracle's July 2026 Critical Patch Update. The flaw affects the Core component across Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, and Oracle rates it CVSS 9.8 with full confidentiality, integrity and availability loss. No public exploit is identified at time of analysis and it is not listed in CISA KEV, but the 'easily exploitable / unauthenticated' characterization makes it a high-priority patch item.
Unauthorized data access in Oracle Coherence (Oracle Fusion Middleware Core component) lets an unauthenticated, network-based attacker read critical data and perform limited unauthorized modification over HTTP. Disclosed in Oracle's July 2026 Critical Patch Update and tagged as an authentication bypass, the flaw carries CVSS 8.2 (C:H/I:L) and affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but Oracle rates it easily exploitable with no privileges required.
Adjacent-network compromise of Oracle Coherence (Oracle Fusion Middleware Core component) lets an unauthenticated attacker on the same physical communication segment read, create, delete, or modify all Coherence-accessible data. Rated CVSS 3.1 8.1, the flaw - tagged as an authentication bypass by the reporter (Oracle) - yields high confidentiality and integrity impact but no availability impact. No public exploit identified at time of analysis and not listed in CISA KEV; disclosed via the Oracle July 2026 Critical Patch Update.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated attacker with network access via HTTP/2 to fully compromise affected versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw yields complete confidentiality, integrity, and availability loss (CVSS 3.1 base 9.8) and was disclosed by Oracle in the July 2026 Critical Patch Update. No public exploit identified at time of analysis, but the network-reachable, no-privilege, no-interaction profile makes it a top-priority patching target.
Remote unauthenticated takeover in Oracle Coherence (Oracle Fusion Middleware, Core component) allows an attacker with only HTTP network access to fully compromise the product across supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle rates this 9.8 (Critical) with full confidentiality, integrity, and availability impact and describes it as easily exploitable, meaning no authentication, credentials, or user interaction are needed. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the combination of unauthenticated network reach and complete compromise makes this a high-priority patch item.
Full remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) versions 12.2.1.4.0 and 14.1.1.0.0 is possible by an unauthenticated attacker sending crafted traffic over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity, and availability impact and is rated by Oracle as 'easily exploitable,' meaning no special skill or configuration is needed. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, no-authentication profile makes it a high-priority patch target.
Full takeover of Oracle Coherence is possible by an unauthenticated remote attacker over TCP, per Oracle's July 2026 Critical Patch Update. The flaw affects the Core component across Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, and yields complete loss of confidentiality, integrity and availability (CVSS 3.1 8.1). Exploitation is rated high-complexity, and no public exploit has been identified at time of analysis.
Complete takeover of Oracle Coherence is possible when an unauthenticated remote attacker reaches the Core component over HTTPS, per Oracle's July 2026 Critical Patch Update. Affected supported releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, and the CVSS 3.1 base score of 9.8 reflects full confidentiality, integrity, and availability compromise with no privileges or user interaction. No public exploit identified at time of analysis, but the low attack complexity and 'easily exploitable' framing from Oracle make this a high-priority patch.
Full takeover of Oracle Coherence (Core component) in Oracle Fusion Middleware allows an unauthenticated attacker to remotely compromise affected instances over HTTP, impacting confidentiality, integrity, and availability. Oracle rates this CVSS 9.8 and describes it as easily exploitable against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit is identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and absence of any authentication requirement make it a top-tier patching priority.
Complete takeover of Oracle Coherence, the in-memory data grid within Oracle Fusion Middleware, is possible for a remote unauthenticated attacker who can reach the product over TCP, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) reflects that no authentication or user interaction is required and that a successful attack fully compromises confidentiality, integrity and availability. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV, but Oracle rates it 'easily exploitable,' making it a high-priority patch in the July 2026 Critical Patch Update.
Full takeover of Oracle Coherence is possible when a remote, unauthenticated attacker reaches the product over TCP and successfully exploits a hard-to-trigger flaw in the Core component, yielding high confidentiality, integrity, and availability impact (CVSS 3.1 8.1). Affected supported releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, all addressed in Oracle's July 2026 Critical Patch Update. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Full compromise of Oracle Coherence, the in-memory data grid within Oracle Fusion Middleware (Core component), is possible by remote unauthenticated attackers over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 and Oracle describes it as easily exploitable, allowing complete takeover with high confidentiality, integrity, and availability impact. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV.
Remote takeover of Oracle Coherence (Core component) allows an unauthenticated attacker with TCP network access to fully compromise the in-memory data grid, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact and no required privileges or user interaction. No public exploit identified at time of analysis, but the trivial exploitability and full-takeover impact make this a high-priority patch for affected Fusion Middleware deployments.
Full takeover of Oracle Coherence (Fusion Middleware Core component) is possible by a low-privileged attacker with TCP network access to an affected instance, per Oracle's July 2026 Critical Patch Update. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, carrying a CVSS 3.1 base score of 8.8 with high confidentiality, integrity and availability impact. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV, but the 'easily exploitable' rating combined with complete-compromise impact makes it a priority patch.
Data compromise in Oracle Coherence (Oracle Fusion Middleware Core component) lets an unauthenticated attacker with network access via TLS read, create, delete, or modify all Coherence-accessible data. Oracle rates it 9.1 (CVSS 3.1) with high confidentiality and integrity impact but no availability impact, and the intelligence tags flag it as an authentication bypass. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated data disclosure in Oracle Coherence (Oracle Fusion Middleware, Core component) versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 lets a remote attacker with only TCP network access read or fully access all Coherence-managed data. Oracle rates it CVSS 3.1 7.5 with confidentiality-only impact and classifies it as easily exploitable; the 'Authentication Bypass' tag indicates the flaw circumvents access controls to expose cluster data. No public exploit identified at time of analysis, and no EPSS or CISA KEV signal is present in the provided data.
Remote takeover of Oracle Coherence (Fusion Middleware Core component) allows an unauthenticated network attacker to fully compromise the affected instance over TCP, per Oracle's July 2026 Critical Patch Update. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, all carrying a CVSS 3.1 base score of 9.8 with full confidentiality, integrity and availability impact. No public exploit identified at time of analysis and the issue is not listed in CISA KEV, but the 'easily exploitable / unauthenticated / network' profile makes it a high-priority patch item.
Full compromise of Oracle Coherence (Core component) is possible for an unauthenticated attacker who can reach the cluster's physical communication segment, per Oracle's July 2026 Critical Patch Update. Affected releases 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 can be taken over completely, yielding high confidentiality, integrity, and availability impact (CVSS 8.8, AV:A). No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but Oracle rates it 'easily exploitable' with no privileges or user interaction required.
Full compromise of Oracle Coherence (Oracle Fusion Middleware Core component) is possible by a remote, unauthenticated attacker over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 9.8 and Oracle rates it 'easily exploitable,' with successful attacks resulting in complete takeover of the Coherence instance (full confidentiality, integrity, and availability loss). No public exploit has been identified at time of analysis, but the low attack complexity and lack of authentication make it a high-priority patch.
Remote takeover of Oracle Coherence (Core component of Oracle Fusion Middleware) allows an unauthenticated attacker with TCP network access to fully compromise the affected data-grid instance across versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates it "easily exploitable" with a CVSS 3.1 base score of 9.8 and full confidentiality, integrity and availability impact. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, no-authentication profile makes it a high-priority patch target.
Full remote takeover of Oracle Coherence (Core component of Oracle Fusion Middleware) is achievable by an unauthenticated network attacker in supported releases 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates the flaw CVSS 9.8 and describes it as 'easily exploitable' over TCP with no user interaction, yielding complete compromise of confidentiality, integrity and availability. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the low attack complexity and unauthenticated network vector make it a top-priority patch from the July 2026 Critical Patch Update.
Full compromise of Oracle Coherence (Fusion Middleware Core component) is achievable by an unauthenticated remote attacker over TCP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 9.8 rating and permits complete takeover with high confidentiality, integrity, and availability impact against versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit identified at time of analysis, and it is not listed in CISA KEV; however, the low attack complexity and unauthenticated network vector make it a high-priority patch target.
Denial of service and data tampering in Oracle Coherence (Oracle Fusion Middleware, Core component) lets a remote unauthenticated attacker with TCP network access hang or repeatedly crash the in-memory data grid and perform unauthorized update, insert, or delete of some accessible data. Oracle rates it CVSS 3.1 8.2 and describes it as 'easily exploitable', reflecting no authentication and low attack complexity. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated remote takeover of Oracle Coherence (a component of Oracle Fusion Middleware, Core component) lets a network attacker with only TCP connectivity fully compromise the affected instance, per Oracle's July 2026 Critical Patch Update. Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 are affected, and the CVSS 3.1 base score of 9.8 reflects complete loss of confidentiality, integrity and availability. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, but the 'easily exploitable / unauthenticated' framing makes it a high-priority patch.
Full compromise of Oracle Coherence, the in-memory data grid component of Oracle Fusion Middleware (Core), allows an unauthenticated remote attacker with only TCP network access to take over the affected instance. Rated CVSS 3.1 9.8 with high confidentiality, integrity, and availability impact, it affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, and was disclosed by Oracle in the July 2026 Critical Patch Update. No public exploit identified at time of analysis, and it is not listed in CISA KEV; no EPSS score was provided in the input.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated attacker with TCP network access to fully compromise the product across supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates this CVSS 9.8 with high confidentiality, integrity, and availability impact, and describes it as 'easily exploitable,' meaning no authentication, user interaction, or special conditions are required. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivial exploitability and complete-takeover impact make it a high-priority patch in the July 2026 Oracle Critical Patch Update.
Full compromise of Oracle Coherence (Oracle Fusion Middleware Core) is possible by unauthenticated attackers with TCP network access, per Oracle's July 2026 Critical Patch Update. The flaw is rated CVSS 9.8 and described by Oracle as 'easily exploitable,' allowing complete takeover of the in-memory data grid across supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated network-takeover profile makes it a high-priority patch.
Full compromise of Oracle Coherence (Oracle Fusion Middleware, Core component) is possible for a low-privileged attacker positioned on the same physical/logical network segment as the host, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.0 with a scope change, meaning successful exploitation not only results in takeover of Coherence itself but can significantly impact other products sharing the environment. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware Core component) affects versions 12.2.1.4.0 and 14.1.1.0.0, allowing an unauthenticated attacker with only HTTP network access to fully compromise the product. Rated CVSS 3.1 9.8 with high confidentiality, integrity, and availability impact, Oracle describes the flaw as easily exploitable and resulting in complete Coherence takeover. Addressed in the Oracle Critical Patch Update of July 2026; no public exploit identified at time of analysis and it is not currently listed in CISA KEV.
Complete takeover of Oracle Coherence is possible by unauthenticated remote attackers over TCP against the Core component in Oracle Fusion Middleware versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates this 'easily exploitable' with full confidentiality, integrity, and availability compromise (CVSS 9.8), fixed in the July 2026 Critical Patch Update. No public exploit identified at time of analysis and the flaw is not on CISA KEV, so exploitation is currently theoretical but the barrier is minimal.
Privilege escalation with scope change in Oracle Coherence (Oracle Fusion Middleware Core component) lets a low-privileged attacker with local logon access compromise the confidentiality and integrity of all Coherence-accessible data and impact additional products beyond Coherence itself. Oracle rates it CVSS 3.1 7.2, but the attack is hard to execute: it requires an existing account, high attack complexity, and human interaction from a separate victim. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the fix ships in Oracle's July 2026 Critical Patch Update.
Full remote takeover of Oracle Coherence (part of Oracle Fusion Middleware, Core component) in versions 12.2.1.4.0 and 14.1.1.0.0 is achievable by an unauthenticated attacker with only HTTP network access, per the CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N with High Confidentiality, Integrity, and Availability impact (base score 9.8). Oracle rates it 'easily exploitable' and describes the outcome as complete compromise of Coherence. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivial-access profile makes it a high-priority patch in the Oracle July 2026 Critical Patch Update.
Full remote takeover in Oracle Coherence 12.2.1.4.0 and 14.1.1.0.0 (Fusion Middleware Core component) allows an unauthenticated network attacker to compromise the in-memory data grid over HTTP with no user interaction. Rated CVSS 3.1 9.8 with high confidentiality, integrity, and availability impact, it was disclosed in Oracle's July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the 'easily exploitable, unauthenticated' profile makes it a prime patching priority.
Remote code execution and full takeover in Oracle Coherence (Oracle Fusion Middleware, Core component) versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 allows an unauthenticated attacker with HTTP network access to completely compromise the product, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity, and availability impact and is described by Oracle as easily exploitable. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated network vector and 'takeover' impact make it a top-priority patch candidate.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated attacker with TCP network access to fully compromise the product across supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates this 'easily exploitable' with complete confidentiality, integrity and availability loss (CVSS 9.8), disclosed in the July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated network-facing nature makes it a high-priority patch.
Authentication bypass and data compromise in Oracle Coherence (Oracle Fusion Middleware Core component) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 allows a low-privileged, network-adjacent attacker to read, create, delete or modify all Coherence-accessible data over HTTP. Because the flaw carries a scope change, successful exploitation can significantly impact additional products beyond Coherence itself, yielding a CVSS 3.1 score of 9.6. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and low privilege requirement make it a high-priority patch item.
Full takeover of Oracle Coherence (an in-memory data grid within Oracle Fusion Middleware) is achievable by an unauthenticated remote attacker over TCP, per Oracle's July 2026 Critical Patch Update. The flaw affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, and carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and lack of authentication make it a high-priority patch item.
Denial-of-service with data tampering in Oracle Coherence 15.1.1.0.0 (Fusion Middleware Core) lets an unauthenticated network attacker hang or repeatedly crash the in-memory data grid over TCP, while also gaining limited unauthorized read and write access to a subset of grid-managed data. Rated CVSS 3.1 8.6 by Oracle and described as 'easily exploitable,' the flaw requires no authentication or user interaction. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Remote takeover of Oracle Coherence (a component of Oracle Fusion Middleware) allows an unauthenticated attacker with TCP network access to fully compromise the affected in-memory data grid, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H) reflects complete loss of confidentiality, integrity, and availability with no authentication or user interaction required. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the 'easily exploitable' framing and full-impact vector make this a high-priority patch across affected versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) can be achieved by unauthenticated remote attackers sending crafted HTTP traffic, affecting versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle rates this CVSS 9.8 with complete confidentiality, integrity, and availability loss, and describes it as 'easily exploitable,' meaning no authentication, user interaction, or special preconditions are required. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV.
Remote unauthenticated compromise of Oracle Coherence (a component of Oracle Fusion Middleware) allows attackers with only network TCP access to fully take over the affected instance, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 9.8 and affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit identified at time of analysis, but the trivial exploitability (AV:N/AC:L/PR:N/UI:N) and full confidentiality, integrity, and availability impact make this a high-priority patch item.
Remote takeover of Oracle Coherence (Core component) in Oracle Fusion Middleware allows an unauthenticated attacker with only TCP network access to fully compromise the in-memory data grid, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score is 9.8 with high confidentiality, integrity, and availability impact, and Oracle rates it 'easily exploitable.' No public exploit has been identified at time of analysis and the flaw is not listed in CISA KEV, but the combination of no authentication and full-system takeover makes it a top-priority patch.
Complete takeover of Oracle Coherence is possible when an unauthenticated attacker with network access over TCP reaches the Core component, yielding full confidentiality, integrity, and availability compromise (CVSS 9.8). The flaw affects Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 shipped as part of Oracle Fusion Middleware, and is addressed in the Oracle Critical Patch Update of July 2026. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Full remote takeover of Oracle Coherence (Fusion Middleware Core component) allows an unauthenticated attacker with only TCP network access to fully compromise the in-memory data grid, per Oracle's July 2026 Critical Patch Update. Oracle rates it 'Easily exploitable' with a CVSS 3.1 base score of 9.8 (C:H/I:H/A:H), meaning a successful attack yields complete confidentiality, integrity, and availability compromise. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV, but the low-complexity, no-authentication profile makes it a high-priority patch.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) is achievable by unauthenticated attackers with only TCP network reachability to the affected service. Per the CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N) and Oracle's own 'easily exploitable' rating, an attacker needs no credentials or user interaction to gain complete control over confidentiality, integrity, and availability (9.8). At time of analysis there is no public exploit identified and the CVE is not listed in CISA KEV, so exploitation is not confirmed; the fix ships in the Oracle Critical Patch Update of July 2026.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) is achievable by unauthenticated remote attackers over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with full confidentiality, integrity, and availability impact, and Oracle explicitly rates it 'easily exploitable' against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the combination of no authentication, low complexity, and complete-takeover impact makes it a top-priority patch.
Remote takeover of Oracle Coherence (Core component of Oracle Fusion Middleware) allows an unauthenticated attacker with TCP network access to fully compromise the affected instance, per Oracle's July 2026 Critical Patch Update. The flaw carries a 9.8 CVSS and impacts confidentiality, integrity and availability of Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. No public exploit has been identified at time of analysis, but the network-reachable, no-authentication profile makes it a high-priority patch.
Denial-of-service in Oracle Coherence (Core component of Oracle Fusion Middleware) lets an unauthenticated attacker with TCP network access hang or repeatably crash the data-grid service, producing a complete availability outage. It affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 and is rated CVSS 3.1 7.5 (availability-only). Oracle labels it easily exploitable, but there is no public exploit identified at time of analysis and it is not on CISA KEV.
Complete takeover of Oracle Coherence (Oracle Fusion Middleware Core component) is possible when an unauthenticated attacker reaches an exposed T3 or IIOP listener over the network, affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Oracle rates this CVSS 3.1 8.1 with full confidentiality, integrity and availability impact but flags it as difficult to exploit (AC:H). There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so risk is currently theoretical but severe if a working exploit emerges.
Complete takeover of Oracle Coherence is possible by an unauthenticated remote attacker over TCP, affecting the Core component in Fusion Middleware versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle rates this 'easily exploitable' with a CVSS 3.1 base score of 9.8 and full confidentiality, integrity, and availability impact. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV, but the low attack complexity and unauthenticated network vector make it a high-priority patch item.
Unauthorized data compromise in Oracle Coherence (Oracle Fusion Middleware Core component) lets an unauthenticated network attacker read and modify all Coherence-accessible data and impact additional products through a scope change, provided a legitimate user is tricked into a required interaction. It affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, carries an Oracle CVSS 3.1 base score of 9.3, and has no public exploit identified at time of analysis. Fixes ship in the Oracle July 2026 Critical Patch Update.
Remote takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated network attacker to fully compromise affected versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 over TCP. Oracle rates the flaw CVSS 9.8 with full confidentiality, integrity, and availability impact and describes it as "easily exploitable," meaning no authentication, user interaction, or special access is required. No public exploit identified at time of analysis, and the CVE is not currently listed in CISA KEV; remediation is delivered through the Oracle July 2026 Critical Patch Update.
Full takeover of Oracle Coherence is possible over the network in this Oracle Fusion Middleware Core-component flaw affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with TCP network access to a Coherence cluster member can leverage it to fully compromise confidentiality, integrity, and availability (CVSS 8.8). No public exploit identified at time of analysis, and the fix ships in Oracle's July 2026 Critical Patch Update.
Complete takeover of Oracle Coherence is achievable by an unauthenticated remote attacker over TCP, with the Core component of this Oracle Fusion Middleware in-memory data grid affected in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The maximum-severity CVSS 10.0 rating reflects a scope-changing flaw whose exploitation can pivot beyond Coherence to impact other co-deployed products. There is no public exploit identified at time of analysis, but the trivial exploitability and unauthenticated network reach make this a top-priority patch.
Full compromise of Oracle Coherence (Core component) allows an unauthenticated attacker with TCP network access to take over affected installations, per Oracle's July 2026 Critical Patch Update. Oracle rates this CVSS 9.8 with high confidentiality, integrity, and availability impact and describes it as 'easily exploitable,' affecting Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated network vector combined with 'takeover' impact makes this a top-priority patch.
Complete takeover of Oracle Coherence is possible by unauthenticated remote attackers over TCP, per Oracle's July 2026 Critical Patch Update (CVE-2026-60215). The flaw in the Core component carries a CVSS 3.1 score of 9.8 and affects Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, delivering full confidentiality, integrity, and availability compromise. No public exploit identified at time of analysis, and it is not on CISA KEV, but the low attack complexity and lack of authentication make it a high-priority patch.
Adjacent-network compromise of Oracle Coherence (Oracle Fusion Middleware Core component) allows a low-privileged attacker on the same physical communication segment to read and modify all Coherence-accessible data, with a scope change that can significantly impact other products on the host. Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 are affected, carrying a CVSS 3.1 base score of 8.7 (High) with high confidentiality and integrity impact but no availability impact. No public exploit identified at time of analysis; the flaw is tagged as an authentication bypass and is fixed in the Oracle July 2026 Critical Patch Update.
Remote takeover of Oracle Coherence (Core component of Oracle Fusion Middleware) allows an unauthenticated attacker with network TCP access to fully compromise the affected instance across confidentiality, integrity, and availability. Oracle rates this 9.8 and describes it as easily exploitable against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low-complexity, no-authentication profile makes it a high-priority patch item from the July 2026 Critical Patch Update.
Full takeover of Oracle Coherence (Core component) is possible by an unauthenticated attacker positioned on the same physical communication segment as the server, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 8.8 with high impact to confidentiality, integrity and availability, and affects Fusion Middleware deployments running Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.
Complete takeover of Oracle Coherence is possible when an unauthenticated attacker with TCP network access to the Core component exploits an easily-exploitable flaw in versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Disclosed by Oracle in the July 2026 Critical Patch Update, the issue carries a CVSS 9.8 score with full confidentiality, integrity, and availability impact and requires no user interaction. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; however, the low attack complexity and unauthenticated network reachability make it a high-priority patch.
Full takeover of Oracle Coherence (Fusion Middleware Core) is achievable by an unauthenticated remote attacker over TCP, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score is 9.8 with complete confidentiality, integrity, and availability impact against supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, no-authentication profile makes it a high-priority patch item.
Remote unauthenticated compromise of Oracle WebLogic Server (Fusion Middleware Core component) lets network attackers read, create, delete, or modify any server-accessible data over HTTP. Tagged as an authentication bypass and scored CVSS 3.1 9.1, it affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 and was disclosed in Oracle's July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the trivial exploitability (AC:L/PR:N/UI:N) makes it a high-priority patch for internet-facing deployments.
Full server takeover in Oracle WebLogic Server (Fusion Middleware Core component) versions 12.2.1.4.0 and 14.1.2.0.0 allows a low-privileged attacker with network HTTP access to fully compromise confidentiality, integrity, and availability of the server. Rated CVSS 3.1 8.8 (High) and disclosed in Oracle's July 2026 Critical Patch Update, the flaw requires only low-level authenticated access and no user interaction, making it attractive for post-authentication lateral movement. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV.
Full server takeover in Oracle WebLogic Server (Fusion Middleware Core component) is achievable by a low-privileged, network-adjacent attacker abusing the SAML authentication path, with a scope change that can propagate impact into additional connected products. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0; the CVSS 9.9 rating reflects complete loss of confidentiality, integrity and availability. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the low complexity and low privilege requirement make it a top-priority patching item.
Full server takeover in Oracle WebLogic Server (Fusion Middleware Core component) affects supported versions 12.2.1.4.0 and 14.1.2.0.0, allowing a remote unauthenticated attacker with only TCP network access to fully compromise the server. The maximum-severity CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H) reflects that successful exploitation yields complete confidentiality, integrity, and availability compromise. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but WebLogic's history as a mass-exploited target makes this a high-priority patch.
Remote takeover of Oracle WebLogic Server (Fusion Middleware, Core component) lets an unauthenticated network attacker fully compromise the server by sending crafted requests over the T3 or IIOP protocols. Oracle rates this 9.8 with full confidentiality, integrity, and availability impact and calls it 'easily exploitable,' affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. No public exploit is identified at time of analysis and it is not in CISA KEV, but this class of unauthenticated T3/IIOP takeover has historically been rapidly weaponized in WebLogic.
Server takeover in Oracle WebLogic Server (Fusion Middleware Core component) allows a low-privileged, remote attacker with HTTP network access to fully compromise the server, per the Oracle July 2026 Critical Patch Update. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, and Oracle rates the flaw 'easily exploitable' with high confidentiality, integrity and availability impact (CVSS 3.1 8.8). No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and authenticated-network vector make it a high-priority patch item.
Complete server takeover in Oracle WebLogic Server (Fusion Middleware Core component) lets an unauthenticated remote attacker fully compromise affected instances by sending crafted traffic over the T3 or IIOP protocols. It carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact and is described by Oracle as 'easily exploitable.' Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are affected; no public exploit identified at time of analysis and it is not currently listed in CISA KEV.
Remote takeover of Oracle WebLogic Server (Fusion Middleware, Core component) is possible by an unauthenticated attacker sending crafted traffic over the T3 or IIOP protocols against versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle rates it CVSS 3.1 8.1 with full confidentiality, integrity, and availability compromise, but flags high attack complexity (AC:H), meaning the flaw is difficult to exploit despite requiring no authentication. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so this is currently a patch-priority based on impact rather than confirmed exploitation.
Remote takeover of Oracle WebLogic Server (Fusion Middleware Core component) allows an unauthenticated network attacker to fully compromise the server via a crafted SOAP request. Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are affected, and Oracle rates it easily exploitable with complete confidentiality, integrity, and availability impact (CVSS 9.8). No public exploit was identified at time of analysis, but given WebLogic's history as a mass-exploitation target, this warrants immediate patching from the July 2026 Critical Patch Update.
Remote takeover of Oracle WebLogic Server (Fusion Middleware Core component) allows an unauthenticated network attacker to fully compromise the server via HTTP, per Oracle's July 2026 Critical Patch Update. Affected releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, all carrying a maximum-severity CVSS 3.1 score of 9.8 with full confidentiality, integrity and availability impact. No public exploit identified at time of analysis, but WebLogic's history as a repeated exploitation target makes this a high-priority patch.
Complete server takeover in Oracle WebLogic Server (Fusion Middleware, Core component) is possible by unauthenticated attackers who reach the T3 or IIOP remoting protocols over the network. Oracle rates this 9.8 with full confidentiality, integrity, and availability impact and describes it as 'easily exploitable,' meaning any exposed T3/IIOP listener on affected 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, or 15.1.1.0.0 builds can be commandeered without credentials. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the T3/IIOP attack surface has a long history of weaponized deserialization exploits, so patch urgency is high.
Full takeover of Oracle Coherence (Oracle Fusion Middleware, Core component) allows an unauthenticated remote attacker with TCP network access to compromise the affected instance, per Oracle's July 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact, and Oracle rates it 'easily exploitable.' Affected releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full server takeover in Oracle WebLogic Server 12.2.1.4.0 and 14.1.2.0.0 (Core component) allows a high-privileged attacker positioned on the adjacent physical communication segment to compromise the server and, due to a scope change, significantly impact additional connected products. Successful exploitation yields complete loss of confidentiality, integrity, and availability. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV; Oracle addressed it in the July 2026 Critical Patch Update.
Full takeover of Oracle MySQL Connector/Net (versions 9.7.0 and 9.7.1) is possible by a low-privileged network attacker who wins a high-complexity attack, with a scope change that lets the compromise significantly impact products beyond the connector itself. Oracle rates this CVSS 3.1 8.5 with high confidentiality, integrity, and availability impact, and it is addressed in the July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise ("takeover") of Oracle's MySQL Connector/NET client library affects the ADO.NET data provider in MySQL Connectors versions 9.7.0 and 9.7.1, where an unauthenticated network attacker can seize control of the connector, impacting confidentiality, integrity, and availability of any .NET application relying on it. Rated CVSS 3.1 8.1 (High) with high attack complexity, this is a client-side flaw disclosed in Oracle's July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data access and modification in Oracle MySQL Connectors (Connector/C++) versions 9.7.0 through 9.7.1 lets an unauthenticated remote attacker reach and tamper with all data accessible to the connector. The flaw is rated CVSS 7.4 with high confidentiality and integrity impact but no availability impact, and is described by Oracle as difficult to exploit (high attack complexity). No public exploit has been identified at time of analysis and it is not listed in CISA KEV; the fix ships in Oracle's July 2026 Critical Patch Update.
Sensitive-data disclosure and partial denial of service in Oracle Payments (Oracle E-Business Suite File Transmission component, versions 12.2.3 through 12.2.15) lets a low-privileged attacker with HTTP network access read all Oracle Payments-accessible data and partially disrupt the service. Oracle rates it CVSS 3.1 7.1 (C:H/A:L), and intelligence tags flag an authentication-bypass characteristic, though the CVSS vector confirms some privilege is required. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise of Oracle BI Publisher (part of Oracle Analytics, BI Platform Security component) is achievable by a remote, unauthenticated attacker sending crafted HTTP requests, per the CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N scoring 9.8. Affected releases are the 8.2.0.0.0 and 12.2.1.4.0 versions, and Oracle rates successful attacks as resulting in complete takeover of the BI Publisher instance with high confidentiality, integrity and availability impact. There is no public exploit identified at time of analysis and no CISA KEV listing, so risk is currently driven by the ease and severity of the flaw rather than confirmed active exploitation.
Unauthorized data disclosure in Oracle Hospitality Simphony POS (versions 19.8-19.8.5, 19.9-19.9.3, and 19.10) lets a remote, unauthenticated attacker reach all data accessible to the application over HTTP. Oracle rates it CVSS 7.5 with confidentiality-only impact and describes it as 'easily exploitable,' and the vendor tags it as an Authentication Bypass. Disclosed in Oracle's July 2026 Critical Patch Update; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise (takeover) of Oracle Hospitality Simphony is possible when an unauthenticated attacker with network access reaches the POS component over HTTP, affecting supported versions 19.8-19.8.5, 19.9-19.9.3, and 19.10. Oracle rates this CVSS 3.1 8.1 with high confidentiality, integrity, and availability impact, but flags the attack as difficult to exploit (AC:H), meaning success depends on conditions outside the attacker's control such as timing, specific state, or reconnaissance. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the fix ships in Oracle's July 2026 Critical Patch Update.
Data tampering and denial of service in Oracle Hospitality Simphony (POS component) versions 19.8-19.8.5, 19.9-19.9.3 and 19.10 allow a remote unauthenticated attacker to compromise the point-of-sale platform over HTTP. Successful attacks can create, delete or modify all Simphony-accessible critical data and can hang or repeatedly crash the service for a complete denial of service. Rated CVSS 3.1 9.1 with no confidentiality impact; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data disclosure in Oracle Hospitality Simphony (POS component) versions 19.8-19.8.5, 19.9-19.9.3, and 19.10 lets a remote, unauthenticated attacker read all data accessible to the application over HTTP. The flaw, tagged as an authentication bypass, requires no privileges or user interaction and yields high confidentiality impact (CVSS 3.1 base 7.5) with no impact to integrity or availability. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so exploitation status is currently theoretical but the low attack complexity makes it a real patching priority.
Full takeover of Oracle MySQL Server and MySQL Cluster is possible through the Server: Group Replication Plugin, where a local attacker holding only a logon to the host running the database can compromise the instance without any database credentials. The flaw affects MySQL Server 8.4.0-8.4.10 and 9.7.0-9.7.1, plus MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1, and carries a CVSS 3.1 base score of 8.4 with high confidentiality, integrity and availability impact. No public exploit identified at time of analysis and the issue is not listed in CISA KEV.