Vulnerability in Oracle Fusion Middleware Control Affecting Oracle Products
CVE-2026-91467

6.6MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Fusion Middleware Control
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91467?

A vulnerability exists in the Oracle Fusion Middleware Control part of Oracle Fusion Middleware that can be easily exploited by an attacker with physical access. Successful exploitation of this vulnerability can lead to a full takeover of the Oracle Fusion Middleware Control. Notably, such attacks necessitate human interaction from someone other than the attacker, thereby increasing the complexity of execution. The vulnerability affects specific supported versions, namely 12.2.1.4.0 and 14.1.2.0.0, highlighting the importance of maintaining security measures in environments running these versions.

Affected Version(s)

Oracle Fusion Middleware Control 12.2.1.4.0

Oracle Fusion Middleware Control 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.