Threats Tagged 'cve-2026-60438'
View all threats tagged with 'cve-2026-60438'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-60438'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-60438: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server accessible data. in Oracle Corporation Oracle HTTP ServerCVE-2026-60438 0 CVE-2026-60438 is a critical vulnerability in Oracle HTTP Server's mod_ssl component affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the server, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impacts without availability impact. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle HTTP Server in the provided advisory content. Join the discussion | CVE Database V5 | 07/21/2026, 21:35:18 UTC Added: 07/21/2026, 22:08:41 UTC |
Showing 1 to 1 of 1 result