{"id":"CVE-2026-91250","published":"2026-10-20T22:20:25.970","lastModified":"2026-10-21T18:44:40.020","description":"Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle SOA Suite.  While the vulnerability is in Oracle SOA Suite, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows low-privileged attackers with network access to completely compromise Oracle SOA Suite through its Adapters component, potentially affecting other products due to scope change. The flaw enables attackers to gain full control over the affected system.","exploitability":"The vulnerability is easily exploitable with low privileges and requires only network access via multiple protocols, making it highly accessible to attackers without significant preconditions.","blast_radius":"Successful exploitation could lead to complete takeover of Oracle SOA Suite and potentially impact additional Oracle Fusion Middleware products due to the scope change in this vulnerability.","remediation":"Upgrade to Oracle SOA Suite 12.2.1.4.0 or 14.1.2.0.0 which contain the fix for this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["soa","middleware","rce","oracle"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:20:45.205Z"}}