CVE-2026-83411

CVE-2026-83411 is a high-severity vulnerability (CVSS 3.1: 8.8) in the Core component of Oracle Coherence, part of Oracle Fusion Middleware. A remote attacker who already holds low-privileged credentials and has HTTP network access to the Coherence service can exploit the flaw easily and achieve a complete takeover of Oracle Coherence, with high impact on confidentiality, integrity, and availability. The affected supported versions are 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.1.0's predecessor 15.1.1.0.0, so organizations running those releases are exposed wherever the Coherence endpoints are reachable by low-trust users. The flaw is not listed in CISA's Known Exploited Vulnerabilities catalog and no public proof-of-concept is known, so there is currently no evidence of active exploitation. Patching should still be treated as a priority because exploitation requires only an authenticated, low-privileged account and yields full compromise.

What to do: Apply Oracle's Critical Patch Update fixes for Coherence on 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 as soon as they are available. Restrict HTTP access to Coherence cluster, proxy, and management endpoints to trusted networks and require strong authentication and TLS. Review local low-privileged account activity and Coherence logs for anomalous privilege escalation or unexpected administrative actions.