Security Vulnerability in Oracle Internet Directory of Oracle Fusion Middleware
CVE-2026-83056

9.9CRITICAL

Key Information:

Vendor

Oracle
Status
Oracle Internet Directory
Vendor
CVE Published:
15 September 2026

What is CVE-2026-83056?

A vulnerability within the Oracle Internet Directory, part of Oracle Fusion Middleware, allows low-privilege attackers with network access through LDAP to compromise the system. While primarily affecting Oracle Internet Directory versions 12.2.1.4.0 and 14.1.2.1.0, successful exploitation may lead to substantial security breaches and impact additional interconnected products. The risk involves potential takeover of the directory service, threatening the confidentiality, integrity, and availability of sensitive information.

Affected Version(s)

Oracle Internet Directory 12.2.1.4.0

Oracle Internet Directory 14.1.2.1.0

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.