CVE-2026-83050

CVE-2026-83050 is an easily exploitable vulnerability in the Runtime Tools component of Oracle WebCenter Portal, part of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.0.0. A remote attacker with only low-privileged (authenticated) access to the portal over HTTP can exploit the flaw to gain unauthorized read access to critical data — potentially all Oracle WebCenter Portal accessible data — as well as unauthorized update, insert, or delete access to some of that data. The vulnerability is scored 7.1 (high) with CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N, meaning no user interaction is required and confidentiality impact is high, though availability is not affected. Organizations running the affected WebCenter Portal versions with HTTP-reachable instances and low-privilege accounts (including self-registered or default portal users) are at risk of data theft and tampering. The flaw is not listed in the CISA Known Exploited Vulnerabilities catalog and no public proof-of-concept is known, so exploitation in the wild is not currently evidenced.

What to do: Apply the Oracle Critical Patch Update that addresses CVE-2026-83050 to all WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 deployments. Restrict HTTP access to the portal so it is not reachable by untrusted or low-privilege users, and review portal account provisioning to minimize low-privileged accounts. Audit logs for unusual data reads or updates by low-privilege users to detect any attempted exploitation.