CVE-2026-35292

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebLogic Server versions 14.1.2.0.0 Oracle Fusion Middleware WebLogic Server versions 15.1.1.0.0

Description An issue exists in the Console component of the WebLogic Server. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the server, potentially leading to a full takeover. Although the flaw resides within the WebLogic Server, successful exploitation may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.