Live › vulnerability › CVE-2026-83409
Go to dashboardOracle Access Manager's Authentication Engine, in supported versions 12.2.1.4.0 and 14.1.2.0.0, has a flaw reachable over the network through SAML. An unauthenticated attacker who can exploit it can take over the Access Manager server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Access Manager 12.2.1.4.0 or 14.1.2.0.0 with SAML reachable from the network. Deployments without those versions, or without network-exposed SAML endpoints, are not affected by this entry. Exploitation is described as difficult, so attack complexity is high.
No product ranges from the sources yet.
12.2.1.4.0 and 14.1.2.0.0Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SAML to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-83409")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.