Live › vulnerability › CVE-2026-91342
Go to dashboardOracle Outside In Technology's Clean Content SDK, version 8.5.8, has a flaw that an unauthenticated network attacker can reach over HTTP. A successful attack can create, change or delete critical data and read a subset of data, and it needs a person other than the attacker to interact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that ship or run Oracle Outside In Clean Content SDK 8.5.8 inside their own Oracle Fusion Middleware deployments or applications that expose it over HTTP. The sources do not say which deployment paths expose the component, so check whether your stack bundles it. Teams that do not use Oracle Outside In can skip this.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Outside In Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91342")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.