Exploitable Vulnerability in Oracle Fusion Middleware Control from Oracle
CVE-2026-83346

5.4MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Fusion Middleware Control
Vendor
CVE Published:
15 September 2026

What is CVE-2026-83346?

A vulnerability in Oracle Fusion Middleware Control allows a low privileged attacker with network access via HTTP to exploit the system. Although the attack requires human interaction from a separate individual, successful exploitation could lead to unauthorized updates, deletions, and read access to sensitive data. This vulnerability not only affects Oracle Fusion Middleware Control but may also significantly impact connected products due to potential scope changes.

Affected Version(s)

Oracle Fusion Middleware Control 12.2.1.4.0

Oracle Fusion Middleware Control 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.