CVE-2026-60889

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware component: OUD Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified...

CVE-2026-60889

...

CVE-2026-60889

An unauthenticated, network-accessible attacker can exploit the OUD Core component via LDAP in Oracle Unified Directory 12.2.1.4.0 and 14.1.2.1.0, gaining unauthorized access to all accessible directory data (CVSS 7.5, HIGH). Oracle's August 2026 Critical Patch Update addresses this; no in-the-wi...