As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0448 Vulnerabilities patched in Oracle Fusion Middleware
Oracle released patches for multiple vulnerabilities across Fusion Middleware, SOA Suite, WebLogic Server, and related products. The flaws span unsafe deserialization, insufficient authentication and access controls, protocol weaknesses in HTTP, HTTP/2, SOAP, T3, IIOP, and LDAP, and cryptographic library defects. Exploitation could enable arbitrary code execution, full system compromise, unauthorized data access, denial of service, and privilege escalation without authentication in many cases.
Why it matters: Organizations running Oracle Fusion Middleware and WebLogic Server face immediate risk of network-based attacks with CVSS scores up to 10.0. The NCSC expects scanning and exploitation attempts to accelerate within days given the wide deployment of these products, making patching an urgent operational priority.
- Source published
- First seen by Cybersecurity Tracker