CVE-2026-73953

CVE-2026-73953 is a critical (CVSS 9.8) vulnerability in the Portlet Services component of Oracle WebCenter Portal, part of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.0.0. Oracle describes it as easily exploitable by an unauthenticated attacker with network access via HTTP, requiring no privileges or user interaction. Successful exploitation can result in a complete takeover of the Oracle WebCenter Portal instance, with high impact on confidentiality, integrity, and availability. Organizations running the affected WebCenter Portal versions on networks reachable by attackers are at risk of full application compromise. No public proof of concept is known and the flaw is not listed in CISA's Known Exploited Vulnerabilities catalog, so exploitation in the wild appears unlikely at this time.

What to do: Apply the Oracle Critical Patch Update that addresses CVE-2026-73953 to all WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 deployments as a top priority. Until patched, restrict HTTP access to the portal at the network layer so only trusted users and VPN clients can reach it, and monitor logs for unexpected unauthenticated requests to Portlet Services endpoints. After remediation, review the instance for signs of compromise such as unauthorized administrative accounts or modified portal content.