CVE-2026-60906

Oracle WebCenter Content Content Server (versions 12.2.1.4.0, 14.1.2.0.0) is vulnerable to unauthenticated HTTP access, allowing complete read access to all stored data (CVSS 7.5, HIGH). No exploitation details are provided. Oracle's August 2026 CPU advisory is referenced for patch information.