Threats Tagged 'cve-2026-46791'

CVE-2026-46791 is a high-severity vulnerability in Oracle WebCenter Content 14.1.2.0.0 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability impacts confidentiality but does not affect integrity or availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory, which addresses numerous vulnerabilities across multiple products. Oracle strongly recommends applying the provided security patches promptly to mitigate the risk. No explicit patch version or temporary fix is detailed in the advisory excerpt, but the advisory references patch availability documents for affected products. Workarounds such as blocking network protocols or removing unnecessary privileges may reduce risk until patches are applied.

CVE-2026-46788 is a high-severity vulnerability in Oracle WebCenter Content 14.1.2.0.0 that allows a high privileged attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and can lead to complete takeover of Oracle WebCenter Content. The vulnerability also has the potential to impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.4, indicating high confidentiality, integrity, and availability impacts.