CVE-2026-61285 is a vulnerability in Oracle Process Manufacturing Systems versions 12.2.11 that allows a high privileged attacker with network access via HTTP to compromise the system. The vulnerability affects the Internal Operations component of Oracle E-Business Suite. It has a CVSS 3.1 base score of 7.2 with high impact on confidentiality, integrity, and availability. Oracle's July 2026 Critical Patch Update advisory references multiple security patches across many products but does not explicitly confirm a patch for this vulnerability. The advisory emphasizes the importance of applying patches without delay to prevent exploitation of known vulnerabilities.

Successful exploitation of CVE-2026-61285 can lead to complete compromise of Oracle Process Manufacturing Systems, impacting confidentiality, integrity, and availability. The attacker requires high privileges and network access via HTTP. The vulnerability could allow an attacker to take over the affected system, potentially leading to unauthorized access and control over sensitive manufacturing operations.

Oracle has released a Critical Patch Update advisory in July 2026 covering numerous vulnerabilities. Although the advisory does not explicitly confirm a patch for CVE-2026-61285, Oracle strongly recommends applying all relevant Critical Patch Updates promptly. Customers should verify patch availability for Oracle Process Manufacturing Systems version 12.2.11 via Oracle Support and apply updates without delay to mitigate this vulnerability. Patch status is not yet confirmed specifically for this CVE; check the vendor advisory for current remediation guidance.