{"id":"CVE-2026-91231","published":"2026-10-20T22:20:23.787","lastModified":"2026-10-21T18:44:40.020","description":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite.  While the vulnerability is in Oracle SOA Suite, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A critical vulnerability in Oracle SOA Suite's Adapters component allows unauthenticated attackers to fully compromise the system through HTTP requests, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This represents a severe risk as it enables complete takeover without any authentication requirements.","exploitability":"The vulnerability is easily exploitable with no prerequisites, requiring only network access via HTTP to execute successful attacks against the affected Oracle SOA Suite versions.","blast_radius":"Successful exploitation could lead to full system compromise of Oracle SOA Suite installations, potentially impacting connected applications and services that rely on this middleware platform.","remediation":"Upgrade to Oracle SOA Suite 14.1.3.0.0 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["soa","middleware","rce","unauthenticated"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:17:46.277Z"}}