Live › vulnerability › CVE-2026-87398
Go to dashboardOracle Outside In Technology, a file-parsing library in Oracle Fusion Middleware, has a flaw that an unauthenticated remote attacker can trigger over HTTP. The result is a repeatable hang or crash that denies service to the application using it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle Fusion Middleware products that embed Oracle Outside In Core version 8.5.8, where HTTP-reachable file parsing passes untrusted content to the library. Sources do not name the exact products or deployment paths. Teams that do not run Oracle Fusion Middleware with Outside In can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-87398")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.