Live › vulnerability › CVE-2026-91261
Go to dashboardOracle WebCenter Content Server 14.1.2.0.0 has a flaw that lets a low-privileged user reach it over HTTP and read a subset of the content it stores. The sources describe only unauthorized read access, with no write or code execution impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle WebCenter Content Server 14.1.2.0.0 that accept HTTP access from users with some low-privilege account. The sources do not say which configurations expose the flaw beyond that, so unknown for the rest. Systems on other releases or with no WebCenter Content deployment can skip it.
No product ranges from the sources yet.
14.1.2.0.0.14.1.2.0.0; the exact patch id is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91261")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.