CVE-2026-83430 is a vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Product Workbench, resulting in unauthorized creation, deletion, or modification of critical data or complete access to all accessible data. The vulnerability has a CVSS 3.1 base score of 8.1 with high confidentiality and integrity impacts and no impact on availability. Oracle has included a fix for this vulnerability in its September 2026 Critical Security Patch Update, which contains 673 new security patches across multiple Oracle products.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle Product Workbench, or unauthorized access to all data accessible by the product. This compromises confidentiality and integrity of the affected system's data. There is no reported impact on availability. The vulnerability is exploitable remotely over the network with low attack complexity and no user interaction required, increasing the risk.

Oracle has released security patches addressing this vulnerability in the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly to remediate this vulnerability. Oracle recommends remaining on actively-supported versions and applying security patches without delay to prevent exploitation. No alternative mitigations or temporary fixes are indicated in the advisory.