CVE-2026-60928

Oracle WebCenter Content (Content Server component) version 14.1.2.0.0 is vulnerable; a low-privileged local attacker can exploit it for unauthorized data read/write with scope change across other products (CVSS 8.4 HIGH). Oracle's August 2026 CPU advisory is the primary reference. No exploit cod...