A high-severity vulnerability (CVE-2026-87162) exists in Oracle Contract Lifecycle Management for Public Sector, part of Oracle E-Business Suite (component: Award/PO). It affects versions 12.2.13 through 12.2.15. The flaw allows a low-privileged attacker with network access via HTTP to potentially take over the affected product. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update including fixes for this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate risk.