CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-60208 — Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware ...

·Source: NIST NVD

Updated:

Executive Summary

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creat

Analysis

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). CVSS Score: 9.1. Published: 2026-07-21T22:17:22.180.

Indicators of Compromise (5)

CVE (1)
CVE-2026-60208
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 21, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

How AI-Driven Robotics Expands Industrial Cyber Risk

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/how-ai-driven-robotics-expands-industrial-cyber-risk-image_small-2-a-32303.jpg" align=right hspace=4><b>CEO: Connected Factories and Hospitals Expose Legacy OT Systems to Modern Threats</b><br>Claroty CEO Yaniv Vardi says physical AI will accelerate robotics and industrial automation while making cyber-physical security a strategi

Bank Info Security
MEDIUMVulnerabilityNEW

US Eyes Sanctions on Chinese AI Firms Over Distillation

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/us-eyes-sanctions-on-chinese-ai-firms-over-distillation-image_small-2-a-32302.jpg" align=right hspace=4><b>Treasury Secretary Says US Is Finding American Model 'Watermarks' in Chinese AI</b><br>Treasury Secretary Scott Bessent said the Trump administration will investigate whether Chinese AI systems were distilled from American mo

Bank Info Security
MEDIUMVulnerabilityNEW

Upbound says hack caused $13 million in fraudulent Acima leases

The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $13 million in Acima leases. [...]

BleepingComputer