NVD-CVE-2026-83141

Nvd.Nist • September 16, 2026

Official websites use .gov A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS A lock ( ) or https:// means you’ve safely connected to the .gov website. sensitive information only on official, secure websites.

CVE-2026-83141 Detail

The CVE has recently been published to the CVE List and is now included within the NVD dataset.

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service. While the vulnerability is in Oracle Field Service, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Field Service accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

References to Advisories, Solutions, and Tools

We hope your visit was informative.

We have provided a link to this site because it has information that may be of interest to our users. NIST does not necessarily endorse the views expressed or the facts presented on this site. Further, NIST does not endorse any commercial products that may be advertised or available on this site.

You will now be directed to:

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Oracle Vulnerabilities Expose Critical Data Risks Recent vulnerabilities have been identified in Oracle products, specifically CVE-2026-83141, CVE-2026-87248, and CVE-2026-83482. CVE-2026-83141 affects Oracle Field Service, allowing low privileged attackers to compromise data with a CVSS score of 7.7. CVE-2026-87248 impacts Oracle Hyperion Financial Management, enabling high privileged attackers to take over the system, with a CVSS score of 6.7. CVE-2026-83482 targets Oracle Contracts, allowing high privileged attackers to gain full control, scoring 7.2. All vulnerabilities are easily exploitable via HTTP access. The affected versions include Oracle E-Business Suite and Oracle Hyperion. These vulnerabilities pose significant risks to organizations using these products, as successful exploitation can lead to unauthorized access to critical data. The vulnerabilities were published on September 15, 2026, and are now included in the NVD dataset. 5 sources 52

Extracted Entities

NVD-CVE-2026-83141

The full story

Extracted Entities

Attack Types (1)

Countries (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)