CVE-2026-60793 is a vulnerability in Oracle TeleSales versions 12.2.3 to 12.2.15 that allows a low privileged attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by Oracle TeleSales. The vulnerability has a CVSS 3.1 base score of 8.1, reflecting high confidentiality and integrity impacts with no impact on availability. The vendor advisory from Oracle references a Critical Patch Update released in July 2026 covering multiple products, including Oracle E-Business Suite components, but does not explicitly confirm the availability of a patch for this specific vulnerability. No known exploits in the wild have been reported at this time.

The vulnerability allows unauthorized actors with low privileges and network access to perform unauthorized creation, deletion, or modification of critical data within Oracle TeleSales, or gain complete access to all data accessible by the product. This compromises the confidentiality and integrity of sensitive business data managed by Oracle TeleSales. There is no reported impact on system availability.

Patch status for CVE-2026-60793 is not explicitly confirmed in the Oracle advisory. Oracle's July 2026 Critical Patch Update advisory includes numerous security patches for Oracle products, including Oracle E-Business Suite components. It is strongly recommended to review the advisory at https://www.oracle.com/security-alerts/cpujul2026.html and apply all relevant patches promptly. Customers should remain on actively supported versions and apply security patches without delay to mitigate this vulnerability. Monitor Oracle's official channels for updated patch information specific to Oracle TeleSales.