A vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating high severity. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update, and customers are strongly advised to apply the patches promptly.