CVE-2026-70802 is a vulnerability in the Regression Testing component of Oracle Public Sector Human Resources within Oracle E-Business Suite versions 12.2.3 to 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially resulting in full system takeover. The vulnerability has a CVSS 3.1 score of 8.0 with high confidentiality, integrity, and availability impacts. Oracle’s Critical Security Patch Update for August 2026 addresses this vulnerability among 943 security patches. The vendor strongly recommends applying these patches without delay to mitigate exploitation risks.

Successful exploitation of this vulnerability can lead to complete compromise of Oracle Public Sector Human Resources, affecting confidentiality, integrity, and availability of the system. The vulnerability requires a high privileged attacker with network access via HTTP and is difficult to exploit. Due to scope change, additional Oracle products may also be impacted by attacks leveraging this vulnerability.

Oracle has released a Critical Security Patch Update in August 2026 that includes a fix for this vulnerability. Customers should apply the official patches provided by Oracle promptly. Oracle strongly recommends remaining on actively-supported versions and applying security patches without delay to prevent exploitation. No additional mitigation actions are specified beyond applying the vendor’s patch.