CVE-2026-61005 affects Oracle Process Manufacturing Logistics versions 12.2.3 through 12.2.15. It is an easily exploitable vulnerability that allows a low privileged attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Oracle Process Manufacturing Logistics. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality and integrity impacts. Oracle's July 2026 Critical Patch Update advisory references multiple security patches but does not explicitly confirm patch availability or remediation status for this vulnerability. Customers are strongly advised to apply Oracle patches promptly as per the advisory.

The vulnerability enables unauthorized creation, deletion, or modification of critical data or full access to all data accessible by Oracle Process Manufacturing Logistics. This compromises data confidentiality and integrity, potentially impacting business operations relying on this product. There is no indication of availability of exploits in the wild at the time of publication.

Oracle's July 2026 Critical Patch Update advisory recommends applying security patches without delay to address vulnerabilities including this one. However, explicit patch availability or remediation details for CVE-2026-61005 are not confirmed in the advisory content provided. Organizations should monitor Oracle's official security alerts and apply relevant patches as soon as they become available. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.