CVE-2026-61003

A critical (CVSS 9.9) flaw in Oracle Fusion Middleware's MFT Runtime Server component affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can exploit it remotely via T3/IIOP protocols to fully compromise the server, with scope change impacting additional products. No in-the-wild...