CVE-2026-61054

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 contain an easily exploitable flaw allowing unauthenticated remote attackers via HTTP to access all site data and modify some records. No exploit code or in-the-wild exploitation details are provided; Oracle's August 2026 CPU patch is the ...