Threats tagged 'ghsa-3526-25ww-hfvh'

A critical vulnerability (CVE-2026-82998) exists in the Service Delivery Platform component Messaging Enabler of Oracle Fusion Middleware. It affects versions 12.2.1.4.0 and 14.1.2.0.0. The flaw allows a low-privileged attacker with network access via T3 or IIOP protocols to compromise the Service Delivery Platform, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.9. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.