CVE-2026-60702

Severity: critical (CVSS 9.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-18 · updated 2026-10-22
Weakness: CWE-284

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

Summary

CVE-2026-60702 is a critical (CVSS 9.9) flaw in the Core component of Oracle WebLogic Server that lets a low-privileged attacker with network access via T3 or IIOP take over the server, with possible scope change affecting other products. It affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. There is no evidence of active exploitation (not in CISA KEV, SSVC exploitation: none; EPSS 0.4%). Apply Oracle's patch for these versions and restrict T3/IIOP network exposure as a mitigation.

تُعدّ CVE-2026-60702 ثغرة حرجة (CVSS 9.9) في مكوّن Core ضمن Oracle WebLogic Server، وتتيح لمهاجم منخفض الصلاحيات لديه وصول شبكي عبر T3 أو IIOP الاستيلاء على الخادم، مع احتمال تغيّر النطاق وتأثّر منتجات أخرى. تشمل الإصدارات المتأثرة 12.2.1.4.0 و14.1.1.0.0 و14.1.2.0.0 و15.1.1.0.0. لا توجد أدلة على استغلال فعلي (ليست في CISA KEV، وتصنيف SSVC للاستغلال: none، واحتمال EPSS 0.4%). يُنصح بتطبيق تحديث Oracle لهذه الإصدارات وتقييد التعرّض الشبكي لـ T3/IIOP كإجراء تخفيف.

Affected products

Oracle WebLogic Server: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0

References

https://www.oracle.com/security-alerts/cspuaug2026.html

Get alerted when CVE-2026-60702 or the next vulnerability affects your stack