A vulnerability exists in Oracle WebCenter Enterprise Capture (component: Client Bundle) affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low privileged attacker with network access via T3 or IIOP protocols to potentially take over the affected product. The CVSS 3.1 base score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected versions.