Live › vulnerability › CVE-2026-91341
Go to dashboardOracle Outside In Technology 8.5.8 (Outside In Clean Content SDK component) has an easily exploitable flaw reachable by an unauthenticated attacker over HTTP. Impact is unauthorized creation, modification or deletion of data plus a repeatable hang or crash. Oracle rates it CVSS 3.1 9.1 (AV:N/AC:L/PR:N/UI:N, I:H/A:H). Fixed in the October 2026 Critical Patch Update, but the public advisory gives no fixed version number.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Oracle Outside In Technology | vendor | 8.5.8 | – |
8.5.8, standalone or bundled in an Oracle product such as WebCenter Content or Fusion Middleware, and whether the Clean Content SDK is reachable over HTTPEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 9.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91341")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.