Threat Intelligence Database

CVE-2026-70757 is a critical vulnerability in Oracle WebLogic Server that allows an unauthenticated attacker with network access via T3 or IIOP protocols to compromise the server. Successful exploitation can lead to full takeover of the Oracle WebLogic Server. The vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.

CVE-2026-70756 is a critical vulnerability in Oracle WebLogic Server that allows an unauthenticated attacker with network access via T3 or IIOP protocols to compromise the server. Successful exploitation can lead to complete takeover of the affected server. The vulnerability affects several supported versions of Oracle WebLogic Server. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.

CVE-2026-70748 is a critical vulnerability in Oracle WebLogic Server allowing unauthenticated attackers with network access via T3 or IIOP protocols to compromise the server. Successful exploitation can lead to full takeover of the Oracle WebLogic Server, impacting confidentiality, integrity, and availability. The affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities. Customers are strongly advised to apply the provided patches promptly to mitigate risk.

CVE-2026-60977 is a critical vulnerability in Oracle WebLogic Server allowing an unauthenticated attacker with network access via RMI to fully compromise the server. The vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. Successful exploitation can lead to complete takeover of the affected server, impacting confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities. Customers are strongly advised to apply the patches promptly to mitigate risk.

CVE-2026-60702 is a critical vulnerability in Oracle WebLogic Server that allows a low privileged attacker with network access via T3 or IIOP protocols to compromise the server. Successful exploitation can lead to full takeover of the Oracle WebLogic Server and may impact additional Oracle products. The vulnerability affects specific versions of Oracle WebLogic Server and has a CVSS 3.1 base score of 9.9, indicating severe confidentiality, integrity, and availability impacts.

CVE-2026-60699 is a high-severity vulnerability in Oracle WebLogic Server that allows an unauthenticated attacker with network access via T3 or IIOP protocols to compromise the server. Successful exploitation can lead to unauthorized access to critical or all accessible data within Oracle WebLogic Server. The vulnerability affects specific versions of Oracle WebLogic Server and may impact additional Oracle products. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, strongly recommending patch application.

CVE-2026-60698 is a critical vulnerability in Oracle WebLogic Server that allows an unauthenticated attacker with network access via IIOP to compromise the server. Successful exploitation can lead to full takeover of the Oracle WebLogic Server, impacting confidentiality, integrity, and availability. Affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability has a CVSS 3.1 base score of 9.8, indicating critical severity. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, and strongly recommends applying patches promptly.

CVE-2026-60696 is a critical vulnerability in Oracle WebLogic Server that allows an unauthenticated attacker with network access via T3 or IIOP protocols to compromise the server. Successful exploitation can lead to full takeover of the Oracle WebLogic Server. The vulnerability affects specific versions of Oracle WebLogic Server including 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The CVSS 3.1 base score is 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate the risk.

CVE-2026-60680 is a high-severity vulnerability in Oracle WebLogic Server that allows a low privileged attacker with network access via HTTP to compromise the server. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or all accessible data on the server, as well as cause a hang or repeated crash resulting in denial of service. The affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle has released security patches addressing this vulnerability as part of their August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.

CVE-2026-60679 is a high-severity vulnerability in Oracle WebLogic Server that allows a low privileged attacker with network access via T3 and IIOP protocols to potentially take over the server. The vulnerability affects specific versions of Oracle WebLogic Server and has a CVSS 3.1 base score of 7.5, indicating high impact on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate risk.