A high-severity vulnerability (CVE-2026-83093) exists in Oracle Forms, a component of Oracle Fusion Middleware. This vulnerability affects versions 12.2.1.19.0 and 14.1.2.0.0 and allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible Oracle Forms data. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant confidentiality impact. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update (CSPU).