Back Miggo

CVE-2026-83037: WebCenter Sites Unauth RCE

Miggo • September 16, 2026

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Vulnerability Intelligence Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Oracle Vulnerabilities Expose Critical Data Risks Recent vulnerabilities have been identified in Oracle products, specifically CVE-2026-83141, CVE-2026-87248, and CVE-2026-83482. CVE-2026-83141 affects Oracle Field Service, allowing low privileged attackers to compromise data with a CVSS score of 7.7. CVE-2026-87248 impacts Oracle Hyperion Financial Management, enabling high privileged attackers to take over the system, with a CVSS score of 6.7. CVE-2026-83482 targets Oracle Contracts, allowing high privileged attackers to gain full control, scoring 7.2. All vulnerabilities are easily exploitable via HTTP access. The affected versions include Oracle E-Business Suite and Oracle Hyperion. These vulnerabilities pose significant risks to organizations using these products, as successful exploitation can lead to unauthorized access to critical data. The vulnerabilities were published on September 15, 2026, and are now included in the NVD dataset. 5 sources 52

Extracted Entities

CVE-2026-83037: WebCenter Sites Unauth RCE

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (2)