CVE-2026-60257 is a critical vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle Coherence in the advisory content provided. No known exploits in the wild have been reported yet.
CVE-2026-60256 is a critical vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has acknowledged the issue in their July 2026 Critical Patch Update advisory but has not explicitly stated patch availability for this specific vulnerability. Customers are strongly advised to apply Oracle's Critical Patch Updates promptly to mitigate risks.
CVE-2026-60255 is a high-severity vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to cause denial of service by hanging or crashing the service and to perform unauthorized update, insert, or delete operations on accessible data. The vulnerability has a CVSS 3.1 base score of 8.2, reflecting significant integrity and availability impacts. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle Coherence in the advisory content provided.
CVE-2026-60254 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-60253 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this and many other vulnerabilities but does not explicitly confirm patch availability or remediation status for this specific issue. No known exploits in the wild have been reported at this time.
CVE-2026-60252 is a high-severity vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to cause a denial of service by hanging or crashing the product. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory but has not explicitly confirmed patch availability or remediation status for Oracle Coherence in the advisory content provided.
CVE-2026-60251 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The CVSS 3.1 base score is 9.8, indicating severe confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle Coherence in the provided content.
CVE-2026-60250 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating severe confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle Coherence in the advisory content provided.
CVE-2026-60249 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It allows a low privileged attacker with access to the physical communication segment attached to the hardware running Oracle Coherence to compromise the product. Successful exploitation can lead to full takeover of Oracle Coherence and may impact additional products. The vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The CVSS 3.1 base score is 9.0, indicating high confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for Oracle Coherence in the advisory content provided.
CVE-2026-60248 is a critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It allows an unauthenticated attacker with logon access to the infrastructure where Oracle Coherence runs to compromise the product. Successful exploitation can lead to full takeover of Oracle Coherence and may impact additional products due to scope change. The vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The CVSS 3.1 base score is 9.3, indicating high confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly state patch availability or remediation level for this specific issue.
CVE-2026-60247 is a critical vulnerability in Oracle Coherence versions 12.2.1.4.0 and 14.1.1.0.0 that allows an unauthenticated attacker with network access via HTTP to fully compromise the product. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Successful exploitation can lead to complete takeover of Oracle Coherence. Oracle has published a Critical Patch Update advisory in July 2026 addressing this and many other vulnerabilities, recommending prompt patching.
CVE-2026-60246 is a critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise the affected Oracle Coherence installations. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation level is currently confirmed by Oracle. Oracle strongly recommends applying security patches promptly as part of their Critical Patch Update process. No known exploits in the wild have been reported at this time.
CVE-2026-60245 is a high-severity vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is difficult to exploit and requires a low privileged attacker to have logon access to the infrastructure where Oracle Coherence runs, plus human interaction from another person. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle Coherence, with potential impact extending to other products. The CVSS 3.1 base score is 7.2, indicating high severity with confidentiality and integrity impacts. No official patch or remediation level is currently confirmed by the vendor advisory. Users should consult the Oracle Critical Patch Update advisory for updates and apply patches promptly when available.
CVE-2026-60244 is a critical vulnerability in Oracle Coherence versions 12.2.1.4.0 and 14.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise the affected Oracle Coherence instances. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but has not explicitly stated patch availability or remediation details for Oracle Coherence in the advisory content provided.
CVE-2026-60243 is a vulnerability in Oracle Coherence that allows a low privileged attacker with network access via TCP to cause a denial of service by hanging or crashing the service. The affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity. No official patch or remediation level has been confirmed yet. Oracle recommends applying security patches promptly as part of their Critical Patch Update advisories.
CVE-2026-60241 is a critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It affects versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The CVSS 3.1 base score is 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory, which contains numerous security patches across multiple products. However, the specific patch status for Oracle Coherence versions affected is not explicitly confirmed in the advisory content provided.
CVE-2026-60240 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for this specific issue. No known exploits in the wild have been reported to date.
CVE-2026-60239 is a critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Coherence, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 9.6, indicating high confidentiality and integrity impacts. While the vulnerability is specific to Oracle Coherence, exploitation may affect additional Oracle products. No official patch or remediation level is explicitly stated in the advisory, but Oracle recommends applying security patches promptly as part of their Critical Patch Update process.
CVE-2026-60238 is a vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 that allows an unauthenticated attacker with network access via HTTP to compromise the product. The vulnerability is difficult to exploit but can lead to unauthorized update, insert, delete, and read access to some Oracle Coherence accessible data. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity. Attacks exploiting this vulnerability may also impact additional products beyond Oracle Coherence. No official patch or remediation level has been explicitly stated in the vendor advisory, which is part of Oracle's July 2026 Critical Patch Update advisory.
CVE-2026-60237 is a vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 that allows an unauthenticated attacker with network access via TCP to gain unauthorized read access to some Oracle Coherence data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity. No official patch or remediation level is explicitly stated in the vendor advisory. Oracle strongly recommends applying security patches promptly as part of their Critical Patch Update program. The vendor advisory does not specify that this vulnerability is already mitigated or that no action is required.