CVE-2026-61140: Critical severity Oracle Oracle WebCenter Sites vulnerability
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61140?
The severity of CVE-2026-61140 is critical with a CVSS score of 9.8.
How do I fix CVE-2026-61140?
To fix CVE-2026-61140, upgrade to the latest version of Oracle WebCenter Sites that addresses this vulnerability.
What components are affected by CVE-2026-61140?
CVE-2026-61140 affects the Oracle WebCenter Sites component of Oracle Fusion Middleware.
Who can exploit CVE-2026-61140?
CVE-2026-61140 can be easily exploited by an unauthenticated attacker with network access via HTTP.
What are the potential impacts of CVE-2026-61140?
Exploitation of CVE-2026-61140 could lead to a complete compromise of Oracle WebCenter Sites, resulting in confidentiality, integrity, and availability issues.