CVE-2026-60737

Oracle Web Services Manager 12.2.1.4.0 and 14.1.2.0.0 (Web Services Security component) is critically vulnerable (CVSS 9.1): an unauthenticated remote attacker can read, create, delete or modify all accessible data. Oracle's August 2026 CPU patch is the official fix. No exploitation details or Po...