Live › vulnerability › CVE-2026-91353
Go to dashboardOracle Outside In Technology 8.5.8 (Outside In Clean Content SDK component) has an easily exploitable flaw reachable by an unauthenticated attacker over HTTP. Impact is read access to critical or all Outside In accessible data, with scope change. Oracle rates it CVSS 3.1 8.6 (C:H, I:N, A:N): no code execution, no tampering, no DoS. Fixed in the October 2026 Critical Patch Update, but the public advisory gives no fixed version number.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| Oracle Outside In Technology | vendor | 8.5.8 | – |
8.5.8, standalone or bundled in an Oracle Fusion Middleware product, and whether the Clean Content SDK is reachable over HTTPEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. While the vulnerability is in Oracle Outside In Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91353")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.