CVE-2026-83065

CVE-2026-83065 is a difficult-to-exploit vulnerability in the Runtime Tools component of Oracle WebCenter Portal, part of Oracle Fusion Middleware, affecting only version 14.1.2.0.0. It allows an unauthenticated attacker who is on the same physical communication segment (adjacent network) as the server running WebCenter Portal to fully compromise the application, with high impact on confidentiality, integrity, and availability — effectively a complete takeover of the portal. Exploitation requires high attack complexity and network adjacency, so the realistic threat is from insiders or attackers who already have a foothold on the internal LAN/VLAN where the portal host resides. Any organization running Oracle WebCenter Portal 14.1.2.0.0 is affected; prior versions are not listed as affected. There is no known public proof of concept, it is not in the CISA Known Exploited Vulnerabilities catalog, and no in-the-wild exploitation has been reported.

What to do: Apply the Oracle Critical Patch Update (CPU) that remediates CVE-2026-83065 and move off the affected 14.1.2.0.0 release to the patched build referenced in Oracle's advisory. Restrict and segment network access to WebCenter Portal hosts so that only required management and application traffic can reach the server's physical network segment. Review portal logs for unauthorized configuration changes or new administrative accounts, since successful attacks result in full application takeover.