CVE-2026-83415

Oracle Coherence, the in-memory data grid component of Oracle Fusion Middleware (Core component), contains a vulnerability in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 that allows a low-privileged attacker with network access via HTTP to compromise the product. The flaw is rated difficult to exploit (CVSS 3.1 base score 7.5, AV:N/AC:H/PR:L), meaning the attacker must already hold some low-level credentials or session and overcome significant attack complexity. Successful attacks can result in a complete takeover of Oracle Coherence, with high impact on confidentiality, integrity and availability. Organizations running the affected Coherence releases, typically as part of WebLogic or broader Fusion Middleware deployments, are at risk. There is no known public proof of concept, no evidence of in-the-wild exploitation, and the CVE is not on the CISA Known Exploited Vulnerabilities list.

What to do: Apply Oracle's latest Critical Patch Update to all affected Coherence versions (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0). Restrict network and HTTP access to Coherence management and Extend endpoints to trusted sources, and review which low-privileged accounts can reach those services. Monitor Coherence logs for anomalous authenticated activity that could indicate exploitation attempts.