Live › vulnerability › CVE-2026-91467
Go to dashboardOracle Fusion Middleware Control has a flaw in its Framework component affecting versions 12.2.1.4.0 and 14.1.2.0.0. The sources say an attacker with physical access and a user's interaction can take over the product.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle Fusion Middleware Control 12.2.1.4.0 or 14.1.2.0.0 are listed as affected. The sources describe exploitation requiring physical access and a human action by someone other than the attacker, so remotely reachable deployments are not described. Teams without these versions can skip it.
No product ranges from the sources yet.
12.2.1.4.0 and 14.1.2.0.0Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows physical access to compromise Oracle Fusion Middleware Control. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Fusion Middleware Control. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91467")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.