CVE-2026-83106: High severity Oracle Oracle Forms vulnerability
Published Sep 15, 2026
·Updated
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
1 affected component
Oracle Oracle Forms=12.2.1.19.0, =14.1.2.0.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to Oracle Forms over HTTP (e.g., limit inbound HTTP connectivity to only trusted hosts/users) to mitigate remote exploitation.
Event History
Sep 15, 2026
CVE Published
via MITRE·08:03 PM
Data Sourced
via MITRE·08:03 PM
DescriptionSeverity
Data Sourced
via NVD·08:18 PM
DescriptionSeverity