CVE-2026-60702

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Oracle WebLogic Server version 14.1.2.0.0 Oracle WebLogic Server version 15.1.1.0.0

Description A flaw in the Core component of Oracle WebLogic Server allows a low-privileged attacker with network access via T3 and IIOP protocols to compromise the server. Successful exploitation can lead to a full takeover of the Oracle WebLogic Server and may significantly impact additional integrated products through a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.