CVE-2026-87347

Summary

Oracle HTTP Server's OSSL Module contains a critical vulnerability that allows low-privileged attackers with network access to compromise the server and potentially impact other Oracle products. The flaw enables unauthorized data modification and access to critical information.

Exploitability

This vulnerability is easily exploitable requiring only low privileges and network access via HTTP, with no user interaction needed for successful exploitation.

Blast radius

Successful exploitation could lead to unauthorized creation, deletion, or modification of critical Oracle HTTP Server data, potentially affecting multiple Oracle products due to the scope change impact.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle HTTP Server version 14.1.2.0.0 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.