High severity · published Aug 18, 2026
CVE-2026-61295
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)
7.1
CVSS
0.2%
EPSS
No
On KEV
Description
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Content executes to compromise Oracle WebCenter Content. While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OW
Oracle WebCenter Content · Oracle Corporation
12.2.1.4.0; 14.1.2.0.0 · source: vendor
WC
Webcenter Content · Oracle
12.2.1.4.0; 14.1.2.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-61295
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-61295
Vendor Advisory
https://www.oracle.com/security-alerts/cspuaug2026.html
More from Oracle WebCenter Content
10.0
CVE-2026-60644
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management)
9.9
CVE-2026-60663
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management)
9.9
CVE-2026-35323
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)
9.9
CVE-2026-35321
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)
9.9
CVE-2026-35316
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server)
