CVE-2026-46982: Critical severity Oracle Oracle Retail Integration Bus vulnerability

Published Jul 21, 2026

Updated

Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 14.1.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Integration Bus. Successful attacks of this vulnerability can result in takeover of Oracle Retail Integration Bus. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected Software

2 affected components

Oracle Oracle Retail Integration Bus=14.1.3.2

Oracle Retail Integration Bus=14.1.3.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Oracle Retail Integration Bus (RIB Kernal) to a version that resolves this vulnerability.
Fixed in 14.1.3.2

Event History

Jul 21, 2026

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

DescriptionSeverity

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-46982?

The severity of CVE-2026-46982 is rated critical with a score of 9.8.

What is affected by CVE-2026-46982?

CVE-2026-46982 affects the Oracle Retail Integration Bus product, specifically version 14.1.3.2.

How do I fix CVE-2026-46982?

To fix CVE-2026-46982, you should apply the latest security patches provided by Oracle for affected versions.

Can CVE-2026-46982 be exploited remotely?

Yes, CVE-2026-46982 can be exploited remotely by an unauthenticated attacker with network access via HTTP.

What type of data is compromised by CVE-2026-46982?

CVE-2026-46982 allows for compromise of confidentiality, integrity, and availability of data in the Oracle Retail Integration Bus.