CVE-2026-60196

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server versions 14.1.2.0.0

Description An access control flaw exists in the Core component of the Oracle WebLogic Server. A high-privileged attacker with access to the physical communication segment attached to the hardware where the server executes can exploit this issue to compromise the system and gain full control over the application. This may also significantly impact additional products through a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.