CVE-2026-60849

Oracle Unified Directory (OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0 have a HIGH-severity (CVSS 8.5) LDAP network vulnerability exploitable by low-privileged attackers, enabling full product takeover with scope change; Oracle's August 2026 CPU advisory is the primary remediation source.