This vulnerability in Oracle WebLogic Server Console component affects versions 14.1.2.0.0 and 15.1.1.0.0. It allows a high privileged attacker with network access via HTTP to compromise the server, potentially resulting in full server takeover. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) reflects network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle's Critical Patch Update advisory for July 2026 references multiple patches across products but does not explicitly confirm patch availability for this CVE in the provided text. Customers are strongly advised to apply Oracle patches promptly as per the advisory.

Successful exploitation can lead to complete compromise of Oracle WebLogic Server, impacting confidentiality, integrity, and availability of the affected system. This could allow attackers to take over the server, potentially leading to unauthorized access, data breaches, and service disruption.

Oracle's July 2026 Critical Patch Update advisory recommends applying security patches without delay to mitigate vulnerabilities. Although the advisory does not explicitly confirm a patch for CVE-2026-60529 in the provided content, customers should review the official Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for patch availability and installation instructions. Maintaining actively-supported versions and promptly applying Oracle patches is strongly advised.