{"id":"CVE-2026-91323","published":"2026-10-20T22:20:34.323","lastModified":"2026-10-27T04:18:00.997","description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and  15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287","CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows unauthenticated attackers to completely compromise Oracle WebLogic Server instances through HTTP requests, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw enables full system takeover with high impact on confidentiality, integrity, and availability.","exploitability":"The vulnerability is easily exploitable with no authentication required, allowing attackers to compromise the server through simple HTTP network access with minimal preconditions.","blast_radius":"In a real-world scenario, this vulnerability could lead to complete system compromise of affected WebLogic servers, potentially exposing sensitive data and allowing attackers to execute arbitrary code on the target systems.","remediation":"Upgrade to Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, or 15.1.1.0.0 as these are the affected versions and no specific fixed version is mentioned in the description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["web","rce","unauthenticated"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:25:17.064Z"}}