CVE-2026-87302

Summary

A vulnerability in Oracle WebLogic Server's Core component allows unauthenticated attackers to compromise confidentiality and integrity of data via network access, enabling unauthorized read or modification of critical data without authentication.

Exploitability

Easily exploitable by an unauthenticated attacker with network access via HTTP; no user interaction or privileges required.

Blast radius

Successful exploitation could lead to full compromise of all accessible data in Oracle WebLogic Server instances across affected versions (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0), including unauthorized data modification or deletion.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle WebLogic Server patch set 12.2.1.4.231201, 14.1.1.0.240618, 14.1.2.0.240618, or 15.1.1.0.240618 (or later), as per Oracle Critical Patch Advisory for July 2024.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.