CVE-2026-83052

CVE-2026-83052 is an easily exploitable vulnerability in the Runtime Tools component of Oracle WebCenter Portal (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0. It is triggered remotely by a high-privileged attacker who has network access to the portal over HTTP, and because the flaw changes scope, a successful attack can significantly impact products beyond WebCenter Portal itself. A successful exploitation yields unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data, as well as unauthorized update, insert, or delete access to some of that data, with no availability impact (CVSS 3.1 base score 7.6, high). Organizations running the affected WebCenter Portal versions with admin/runtime tooling reachable over the network are exposed. The issue is not listed in CISA's KEV catalog, no public proof of concept is known, and no exploitation in the wild has been reported.

What to do: Apply the Oracle Critical Patch Update that resolves CVE-2026-83052 to all WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 deployments as soon as it is available. Restrict HTTP access to WebCenter Portal and its Runtime Tools/admin interfaces to trusted management networks or VPN, and enforce least-privilege on portal administrator accounts. Review portal audit logs for anomalous data reads or unauthorized inserts/updates/deletes by high-privileged accounts, and rotate credentials for those accounts if compromise is suspected.