CVE-2026-91622

Summary

This vulnerability allows unauthenticated attackers to gain full access to critical data and modify all Oracle Agile Product Lifecycle Management for Process data without requiring any authentication or user interaction. The flaw is in the Product Quality Management component of Oracle's supply chain management system.

Exploitability

The vulnerability is easily exploitable with network access via HTTP, requiring no authentication, but successful attacks need human interaction from a user other than the attacker.

Blast radius

If exploited, attackers could compromise all accessible data in Oracle Agile Product Lifecycle Management for Process, potentially affecting additional products due to scope change, with high impact on both confidentiality and integrity.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

No fixed version is published. Disable the affected feature or restrict access to the named endpoint until a patch is available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.