CVE-2026-83434 is a vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations) affecting supported versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Product Workbench, resulting in unauthorized creation, deletion, or modification of critical data or complete access to all accessible data. The CVSS 3.1 base score is 8.1, indicating high impact on confidentiality and integrity without affecting availability. Oracle's September 2026 Critical Security Patch Update includes fixes for this vulnerability among 673 other patches.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle Product Workbench, as well as unauthorized access to all data accessible by the product. This compromises confidentiality and integrity of the affected system. There is no indication of availability impact. The vulnerability is exploitable remotely over the network with low attack complexity and requires low privileges.

Oracle has released security patches addressing this vulnerability in the September 2026 Critical Security Patch Update. Customers using Oracle E-Business Suite versions 12.2.3 through 12.2.15 should apply the relevant patches promptly to remediate this issue. Oracle strongly recommends remaining on actively supported versions and applying security patches without delay to prevent exploitation.