CVE-2026-83023 is a vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). It affects supported versions 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Identity Manager Connector, potentially resulting in unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 8.6 with a vector indicating network attack vector, low attack complexity, no privileges required, no user interaction, scope change, and high confidentiality impact. Oracle has released patches for this vulnerability as part of the September 2026 Critical Security Patch Update.

Successful exploitation can lead to unauthorized access to critical data within Oracle Identity Manager Connector, potentially impacting additional products due to scope change. The confidentiality impact is high, but integrity and availability impacts are not affected. The vulnerability is exploitable remotely without authentication or user interaction.

Oracle has released a security patch for this vulnerability in the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly to mitigate the risk. Oracle recommends remaining on actively supported versions and applying security patches without delay. No alternative mitigations or temporary fixes are indicated in the advisory.