← Back to search

CVE-2026-91231

10 CRITICAL

Published 2026-10-20 · Updated 2026-10-21

AI risk analysis

Summary
A critical vulnerability in Oracle SOA Suite's Adapters component allows unauthenticated attackers to fully compromise the system through HTTP requests, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This represents a severe risk as it enables complete takeover without any authentication requirements.
Exploitability
The vulnerability is easily exploitable with no prerequisites, requiring only network access via HTTP to execute successful attacks against the affected Oracle SOA Suite versions.
Blast radius
Successful exploitation could lead to full system compromise of Oracle SOA Suite installations, potentially impacting connected applications and services that rely on this middleware platform.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Oracle SOA Suite 14.1.3.0.0 or later to remediate this vulnerability.
soamiddlewarerceunauthenticated

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. While the vulnerability is in Oracle SOA Suite, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.