Live › vulnerability › CVE-2026-91323
Go to dashboardUnauthenticated HTTP flaw in Oracle WebLogic Server Core (CVSS 9.8) lets a remote attacker take over the server. It is fixed in Oracle's October 2026 Critical Patch Update. No known exploitation or public PoC yet, but WebLogic is historically a favourite target when internet-exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| Oracle WebLogic Server | vendor | 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0 | PSU 40069416 (12.2.1.4.0), PSU 40069954 (14.1.1.0.0), PSU 40058371 (14.1.2.0.0), PSU 40050052 (15.1.1.0.0) |
15.1.1.0.0, 40058371 for 14.1.2.0.0, 40069954 for 14.1.1.0.0, 40069416 for 12.2.1.4.0)12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 or 15.1.1.0.0, you are exposed15.1.1.0.0 -> 40050052; 14.1.2.0.0 -> 40058371; 14.1.1.0.0 -> 40069954; 12.2.1.4.0 -> 40069416 (patch numbers per Rapid7; confirm against Oracle's patch availability document)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91323")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.