This vulnerability affects Oracle WebLogic Server core component in versions 12.2.1.4.0 and 14.1.2.0.0. It requires an attacker with high privileges and physical network segment access to the hardware hosting the server. The vulnerability allows complete compromise of the WebLogic Server, potentially affecting other Oracle products due to scope change. The CVSS vector indicates the attack requires adjacent network access (AV:A), low attack complexity (AC:L), high privileges (PR:H), no user interaction (UI:N), and results in a complete confidentiality, integrity, and availability compromise (C:H/I:H/A:H). The vendor advisory from Oracle's July 2026 Critical Patch Update does not explicitly confirm a patch for this specific CVE but strongly urges customers to apply available patches without delay. No known exploits in the wild have been reported.

Successful exploitation results in full takeover of Oracle WebLogic Server, compromising confidentiality, integrity, and availability of the server and potentially impacting additional Oracle products. The attacker must have high privileges and physical access to the communication segment of the hardware running the server. The vulnerability's scope change means that other products relying on WebLogic Server could also be affected.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends that customers remain on actively supported versions and apply security patches promptly once available. Until a patch is confirmed, restrict physical and network access to the hardware and communication segments hosting Oracle WebLogic Server to trusted personnel only.