Oracle Retail Integration Bus
Monthly
Full takeover of Oracle Retail Integration Bus 16.0.3 (RIB Kernel component) is achievable by an unauthenticated remote attacker over HTTP, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact reflects complete compromise of the RIB instance with no user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivially low attack complexity makes it a high-priority patch target.
Full compromise of Oracle Retail Integration Bus 14.1.3.2 (RIB Kernel component) allows a remote, unauthenticated attacker to take over the product over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw is rated CVSS 9.8 with high confidentiality, integrity, and availability impact and is described by Oracle as 'easily exploitable.' No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Full takeover of Oracle Retail Integration Bus 16.0.3 (RIB Kernel component) is achievable by an unauthenticated remote attacker over HTTP, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score of 9.8 with high confidentiality, integrity, and availability impact reflects complete compromise of the RIB instance with no user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivially low attack complexity makes it a high-priority patch target.
Full compromise of Oracle Retail Integration Bus 14.1.3.2 (RIB Kernel component) allows a remote, unauthenticated attacker to take over the product over HTTP, per Oracle's July 2026 Critical Patch Update. The flaw is rated CVSS 9.8 with high confidentiality, integrity, and availability impact and is described by Oracle as 'easily exploitable.' No public exploit identified at time of analysis, and it is not listed in CISA KEV.