CVE-2026-83057

A critical vulnerability in the OID LDAP Server component of Oracle Internet Directory, part of Oracle Fusion Middleware, allows a low-privileged attacker with network access via LDAP to fully compromise the directory service. The flaw requires only an authenticated (low-privilege) LDAP connection and no user interaction, and because of a scope change, successful attacks can significantly impact additional products beyond Oracle Internet Directory itself. Successful exploitation results in a complete takeover of Oracle Internet Directory with high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 9.9). Affected deployments are Oracle Internet Directory versions 12.2.1.4.0 and 14.1.2.1.0. No public proof-of-concept exists, the issue is not in the CISA Known Exploited Vulnerabilities catalog, and no exploitation in the wild has been reported.

What to do: Apply the Oracle Critical Patch Update that addresses CVE-2026-83057 to Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 deployments as soon as it is available. Restrict LDAP (ports 389/636) access at the network layer to only trusted clients and management hosts, and audit low-privilege LDAP bind accounts for unnecessary access. Review LDAP and OID server logs for anomalous bind, search, and modify activity from low-privilege accounts as an indicator of attempted exploitation.