UpHeron
All vulnerabilities

Servers and applications

CVE-2026-91323

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle…

Severity
Critical 9.8
Published
20 Oct 2026
Last changed
27 Oct 2026
Added to UpHeron
3 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Oracle WebLogic ServerServers and applications · cna:oracle corporation|oracle weblogic server
  • Every version up to 12.2.1.4.0
  • From 14 up to 14.1.1.0.0
  • From 14.1.2 up to 14.1.2.0.0
  • From 15 up to 15.1.1.0.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-91323