CVE-2026-83027

CVE-2026-83027 is an easily exploitable, unauthenticated vulnerability in the Core component of Oracle Identity Manager (OIM) Connector, part of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.1.0. An attacker only needs a foothold on the same physical network segment where the OIM Connector executes — no privileges or user interaction are required — to trigger the flaw. A successful attack can compromise the connector and, because of a scope change, may significantly impact additional products beyond OIM Connector itself. The attacker gains unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to critical or all OIM Connector-accessible data, with high confidentiality and integrity impact (CVSS 3.1 base score 9.3, availability unaffected). No public proof of concept exists and the flaw is not on the CISA KEV catalog, so exploitation in the wild is not known.

What to do: Apply the Oracle Critical Patch Update that addresses CVE-2026-83027 to OIM Connector 12.2.1.4.0 and 14.1.2.1.0 deployments as soon as your patch cycle allows. Restrict and monitor access to the network segments where the OIM Connector executes (e.g., VLAN segmentation and allow-listing) since exploitation requires only adjacency, not authentication. Review identity stores and connected target systems for unauthorized data creation, modification, or deletion, keeping in mind the scope change can affect products beyond the connector itself.