CVE-2026-46983: Critical severity Oracle Oracle Retail Integration Bus vulnerability

Published Jul 21, 2026

Updated

Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 16.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Integration Bus. Successful attacks of this vulnerability can result in takeover of Oracle Retail Integration Bus. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected Software

2 affected components

Oracle Oracle Retail Integration Bus=16.0.3

Oracle Retail Integration Bus=16.0.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Oracle Retail Integration Bus (RIB Kernal) to a version that resolves this vulnerability.
Fixed in 16.0.3

Event History

Jul 21, 2026

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

DescriptionSeverity

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-46983?

CVE-2026-46983 has a critical severity rating of 9.8.

How do I fix CVE-2026-46983?

To mitigate CVE-2026-46983, update to the latest patched version of Oracle Retail Integration Bus.

Who is affected by CVE-2026-46983?

CVE-2026-46983 affects users of the Oracle Retail Integration Bus version 16.0.3.

What is the potential impact of CVE-2026-46983?

CVE-2026-46983 can allow an unauthenticated attacker with network access to compromise the Oracle Retail Integration Bus.

Was CVE-2026-46983 easily exploitable?

Yes, CVE-2026-46983 is considered easily exploitable due to its unauthenticated access requirements.