CISA Adds Critical Oracle Fusion Middleware Flaw to Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in Oracle Fusion Middleware, tracked as CVE-2025-61757, to its Known Exploited Vulnerabilities catalog. This vulnerability, which has a CVSS score of 9.8, involves a missing authentication for a critical function, potentially exposing systems to exploitation. Oracle has addressed this flaw with a Critical Patch Update released in October 2025.