CVE-2026-46814: Critical severity Oracle Oracle WebCenter Portal vulnerability
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to Oracle WebCenter Portal HTTP endpoints to trusted IPs only (via firewall, ACLs or VPN). Block or limit public HTTP access to the affected application wherever possible.
- Compensating control
Place a web application firewall (WAF) or intrusion detection/prevention system (IDS/IPS) in front of the WebCenter Portal HTTP interfaces and enable rules/signatures to detect and block exploitation attempts targeting the application.
- Operational
Increase logging and monitoring for the WebCenter Portal (HTTP access logs, application logs, authentication events). Investigate suspicious activity immediately. If compromise is suspected, isolate the affected systems, perform incident response, rotate credentials and restore from known-good backups.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46814?
CVE-2026-46814 has a critical severity rating of 9.9.
How do I fix CVE-2026-46814?
To fix CVE-2026-46814, upgrade to a patched version of Oracle WebCenter Portal that addresses the vulnerability.
What versions are affected by CVE-2026-46814?
CVE-2026-46814 affects Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0.
What type of access is required to exploit CVE-2026-46814?
A low privileged attacker requires network access via HTTP to exploit CVE-2026-46814.
What components of Oracle Fusion Middleware are affected by CVE-2026-46814?
CVE-2026-46814 specifically impacts the Security Framework component of the Oracle WebCenter Portal.