Vulnerability in Oracle Fusion Middleware's Outside In Technology
CVE-2026-91460

7.8HIGH

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-91460?

A vulnerability exists in Oracle Outside In Technology, specifically within the Outside In Image Export SDK of Oracle Fusion Middleware version 8.5.8. This flaw allows an unauthenticated attacker with access to the infrastructure where Oracle Outside In Technology operates to exploit the vulnerable component. The exploitation requires interaction from a separate individual, which adds a layer of complexity to the attack. Successful exploitation could enable an attacker to gain unauthorized control over Oracle Outside In Technology, thereby compromising critical data and system integrity. Organizations utilizing affected versions should assess their security posture and apply necessary mitigations.

Affected Version(s)

Oracle Outside In Technology 8.5.8

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.