CVE-2026-61038

Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 are vulnerable to an unauthenticated, network-accessible HTTP exploit (CVSS 8.2 HIGH) enabling unauthorized data access and partial data modification. Oracle's August 2026 CPU advisory (linked in references) is the primary source for patch details....