CVE-2026-60295: Difficult to exploit vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Coherence. in Oracle Corporation Oracle Coherence Radar - Latest Security Threats / 1d Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).

This vulnerability affects the Core component of Oracle Coherence within Oracle Fusion Middleware. It permits a low privileged attacker with network access via TCP to compromise Oracle Coherence, potentially resulting in full product takeover. The CVSS vector indicates network attack vector with high attack complexity, low privileges required, no user interaction, and scope change, with high impacts on confidentiality, integrity, and availability. The affected versions are exactly 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle's July 2026 Critical Patch Update advisory references this vulnerability among many others but does not explicitly state the availability of a patch or fix for these specific versions. Customers are strongly advised to review the advisory and apply patches promptly if available.

Successful exploitation can lead to complete compromise of Oracle Coherence, affecting confidentiality, integrity, and availability of the system. Due to scope change, other Oracle products relying on Coherence may also be impacted. The vulnerability is difficult to exploit and requires network access via TCP with low privileges, but the consequences of a successful attack are severe.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory. Customers should consult the advisory at for patch availability and installation instructions. Since the advisory does not explicitly confirm patch availability for the affected Oracle Coherence versions, patch status is not yet confirmed. Customers should monitor Oracle's official channels for updates and apply any released patches without delay. Maintaining actively supported versions and timely patching is strongly recommended by Oracle to mitigate exploitation risks.

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

Machine-generated threat intelligence

This vulnerability affects the Core component of Oracle Coherence within Oracle Fusion Middleware. It permits a low privileged attacker with network access via TCP to compromise Oracle Coherence, potentially resulting in full product takeover. The CVSS vector indicates network attack vector with high attack complexity, low privileges required, no user interaction, and scope change, with high impacts on confidentiality, integrity, and availability. The affected versions are exactly 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Oracle's July 2026 Critical Patch Update advisory references this vulnerability among many others but does not explicitly state the availability of a patch or fix for these specific versions. Customers are strongly advised to review the advisory and apply patches promptly if available.

Successful exploitation can lead to complete compromise of Oracle Coherence, affecting confidentiality, integrity, and availability of the system. Due to scope change, other Oracle products relying on Coherence may also be impacted. The vulnerability is difficult to exploit and requires network access via TCP with low privileges, but the consequences of a successful attack are severe.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory. Customers should consult the advisory at for patch availability and installation instructions. Since the advisory does not explicitly confirm patch availability for the affected Oracle Coherence versions, patch status is not yet confirmed. Customers should monitor Oracle's official channels for updates and apply any released patches without delay. Maintaining actively supported versions and timely patching is strongly recommended by Oracle to mitigate exploitation risks.

Threat ID: 6a5fe6e69c2644c7f8cb194d

Added to database: 07/21/2026, 21:38:46 UTC

Last enriched: 07/21/2026, 22:09:29 UTC

Last updated: 07/22/2026, 22:32:09 UTC

Crowdsource mitigation strategies, intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Instant breach scanning across billions of leaked records. Free tier available.