This vulnerability in Oracle Coherence's core component allows an unauthenticated attacker with network access via TCP to exploit the system easily. Successful exploitation can lead to full compromise and takeover of Oracle Coherence. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) confirms that the attack requires no privileges or user interaction and can be performed remotely with low complexity, impacting confidentiality, integrity, and availability at a high level. Affected versions explicitly include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vendor advisory from Oracle (https://www.oracle.com/security-alerts/cpujul2026.html) lists this vulnerability among many patched in the July 2026 Critical Patch Update but does not provide a direct patch link or specific remediation details for this CVE in the provided content.

An unauthenticated attacker with network access via TCP can exploit this vulnerability to gain full control over Oracle Coherence. This compromises confidentiality, integrity, and availability of the affected system, potentially allowing complete takeover and unauthorized actions within Oracle Coherence environments.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory. Customers are strongly advised to apply the relevant patches from this update promptly to remediate the vulnerability. Since no direct patch link is provided here, users should consult the official Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for detailed patch availability and installation instructions. No alternative mitigations or workarounds are specified in the advisory content provided.