CVE-2026-60294

Oracle WebLogic Server (Fusion Middleware Core) is affected by CVE-2026-60294 in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via SOAP to compromise the server, potentially taking over the instance. CVSS 3.1 ...

EUVD-2025-60294

Malicious code in citra-serimuka79-sluey npm...