{"id":"CVE-2026-83399","published":"2026-10-20T22:19:56.430","lastModified":"2026-10-21T18:44:55.490","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287","CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows unauthenticated attackers to fully compromise Oracle WebLogic Server instances via T3 or IIOP protocols, leading to complete system takeover with high impacts on confidentiality, integrity, and availability.","exploitability":"The vulnerability is easily exploitable with no authentication required, allowing attackers to gain full control of affected WebLogic servers through standard network access using T3 or IIOP protocols.","blast_radius":"In a typical enterprise environment, this vulnerability could allow attackers to compromise critical application servers, potentially leading to data breaches, service disruption, and lateral movement across the network.","remediation":"Apply the Oracle Critical Patch Update (CPU) for October 2026 which includes fixes for WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0.","detection":"Monitor for unusual T3 or IIOP protocol traffic patterns in network logs, particularly from external IP addresses to WebLogic server ports, and look for failed authentication attempts followed by successful session establishment.","tags":["rce","weblogic","t3","iiop","remote-exploit"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:24:33.095Z"}}