CVE-2026-83038

Severity: critical (CVSS 9.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-15 · updated 2026-10-15
Weakness: CWE-284

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

Summary

CVE-2026-83038 is a critical (CVSS 9.9) flaw in Oracle WebLogic Server's TopLink Integration component that lets a low-privileged attacker with HTTP network access take over the server, with scope change potentially affecting other products. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. It is not in CISA KEV and no exploitation is reported; EPSS estimates a 0.4% chance of exploitation in 30 days. Apply Oracle's patch for these versions and restrict network exposure of WebLogic until patched.

CVE-2026-83038 ثغرة حرجة (CVSS 9.9) في مكوّن TopLink Integration ضمن Oracle WebLogic Server، تتيح لمهاجم منخفض الصلاحيات لديه وصول شبكي عبر HTTP الاستيلاء على الخادم، مع احتمال تأثير ممتد على منتجات أخرى (scope change). الإصدارات المدعومة المتأثرة هي 12.2.1.4.0 و14.1.1.0.0 و14.1.2.0.0 و15.1.1.0.0. الثغرة غير مدرجة في CISA KEV ولا يوجد استغلال مُبلَّغ عنه، وتقدّر EPSS احتمال الاستغلال خلال 30 يوماً بنسبة 0.4%. طبّقوا تحديث Oracle لهذه الإصدارات وقلّلوا تعريض WebLogic للشبكة حتى التركيب.

Affected products

Oracle WebLogic Server: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0

References

https://www.oracle.com/security-alerts/cspusep2026.html

Get alerted when CVE-2026-83038 or the next vulnerability affects your stack