CVE-2026-61007

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 are affected by an unauthenticated, network-accessible vulnerability (CVSS 7.5 HIGH) allowing unauthorized access to all site data. Oracle's August 2026 security advisory provides patch details; no exploitation evidence is provided in the ...