CVE-2026-60958

Oracle WebCenter Enterprise Capture (versions 12.2.1.4.0 and 14.1.2.0.0, Client Bundle component) has a critical flaw: an unauthenticated remote attacker can fully compromise the application over HTTP (CVSS 9.8). Oracle's August 2026 CPU advisory is referenced for patch details. No exploit code o...