This vulnerability affects Oracle WebCenter Content, a component of Oracle Fusion Middleware Web Content Management. It is exploitable remotely over the network via HTTP by an attacker with low privileges and no user interaction required. Successful exploitation can lead to complete compromise of Oracle WebCenter Content, impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory references a Critical Patch Update for July 2026 but does not explicitly state a patch or fix for this specific vulnerability in the provided content.

The vulnerability allows an attacker with low privileges and network access to fully compromise Oracle WebCenter Content, resulting in complete takeover. This includes unauthorized disclosure, modification, and disruption of data and services within the affected product versions. The high CVSS score reflects severe impacts on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying Critical Patch Updates promptly to mitigate known vulnerabilities. Until a patch is confirmed, restrict network access to Oracle WebCenter Content instances and monitor for unusual activity related to this product.