This vulnerability exists in the Core component of Oracle Fusion Middleware's WebCenter Content: Imaging product. It is exploitable remotely over HTTP by an attacker with low privileges, enabling compromise of the system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory references the July 2026 Critical Patch Update, which addresses numerous vulnerabilities across Oracle products, but does not explicitly confirm a patch for this specific CVE or provide remediation details.

Successful exploitation can lead to complete compromise of Oracle WebCenter Content: Imaging, affecting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the affected product, potentially impacting business operations relying on this software.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly on actively supported versions. Until a patch is confirmed and applied, restrict network access to the affected service where possible to reduce exposure.