Exploitable Vulnerability in Oracle WebCenter Content from Oracle
CVE-2026-60928

8.4HIGH

Key Information:

Vendor

Oracle
Status
Oracle Webcenter Content
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60928?

An access control vulnerability has been discovered in Oracle WebCenter Content, part of Oracle Fusion Middleware. This weakness permits a low privileged attacker with valid logon credentials to exploit the system, potentially compromising Oracle WebCenter Content. This could lead to unauthorized actions such as creation, deletion, or modification of critical data, affecting not only Oracle WebCenter Content but also potentially impacting other interconnected products. Attackers may gain unauthorized access to all data accessible through Oracle WebCenter Content, raising significant risks to data confidentiality and integrity.

Affected Version(s)

Oracle WebCenter Content 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.