CVE-2026-35300: Critical severity Oracle WebLogic Server vulnerability
Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise WebLogic Server. Successful attacks of this vulnerability can result in takeover of WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict TCP network access to WebLogic Server instances: block direct access from the Internet and allow only trusted IPs/ranges via firewall rules or ACLs.
- Compensating control
Place WebLogic Server instances behind a web application firewall (WAF) and/or isolate them using network segmentation to prevent unauthenticated network access to the service.
- Operational
Inventory all WebLogic Server installations and identify any running the affected versions listed in the advisory: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0.
- Operational
Monitor Oracle security advisories and apply vendor-provided security updates or patches for WebLogic Server as soon as they are released.
- Operational
If compromise is suspected or confirmed, perform incident response actions including rotating and revoking credentials, restoring affected systems from known-good backups, and reviewing logs for signs of unauthorized activity.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35300?
CVE-2026-35300 has a critical severity rating of 9.8.
How do I fix CVE-2026-35300?
To fix CVE-2026-35300, update your Oracle WebLogic Server to the latest supported version.
What systems are affected by CVE-2026-35300?
CVE-2026-35300 affects Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.
Is CVE-2026-35300 easily exploitable?
Yes, CVE-2026-35300 is an easily exploitable vulnerability that allows unauthenticated attackers with network access to compromise WebLogic.
What components of Oracle Fusion Middleware are impacted by CVE-2026-35300?
CVE-2026-35300 impacts the Core component of the Oracle Fusion Middleware WebLogic Server product.