This vulnerability affects Oracle WebCenter Content 14.1.2.0.0 and allows a low privileged attacker with network access via HTTP to compromise the system. The attack requires user interaction from a third party and can result in unauthorized creation, deletion, or modification of critical data, with a scope change potentially impacting other Oracle products. The CVSS 3.1 base score is 8.7, indicating high severity with significant confidentiality and integrity impacts. Oracle's June 2026 Critical Security Patch Update advisory references many patches but does not explicitly confirm a patch for this CVE. Oracle strongly recommends applying Critical Security Patch Updates promptly to mitigate risks.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle WebCenter Content, resulting in a significant confidentiality and integrity breach. The vulnerability's scope change means it may also impact additional Oracle products beyond WebCenter Content. The CVSS 3.1 score of 8.7 reflects high impact on confidentiality and integrity, with no impact on availability. Exploitation requires user interaction, which may limit automated exploitation but still poses a serious risk.

Oracle strongly recommends applying the June 2026 Critical Security Patch Update as soon as possible to address this and other vulnerabilities. Although the advisory does not explicitly confirm a patch for CVE-2026-46808, applying the CSPU is the best available remediation. Until patches are applied, risk can be reduced by blocking network protocols required by the attack and removing unnecessary privileges or package access from users. These mitigations may impact application functionality and should be tested accordingly.