Unauthenticated Access Vulnerability in Oracle Outside In Technology
CVE-2026-91343

8.6HIGH

Key Information:

Vendor

Oracle
Status
Oracle Outside In Technology
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91343?

A vulnerability exists in the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically in the Outside In Clean Content SDK, which could be exploited by unauthenticated attackers with network access via HTTP. This flaw allows for unauthorized creation, deletion, or modification of critical data accessible through Oracle Outside In Technology. The impact of successful exploitation extends beyond the immediate product, potentially affecting other related systems and data integrity.

Affected Version(s)

Oracle Outside In Technology 8.5.8

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.