CVE-2026-60215: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar
criticalvulnerability
security
Summary
A critical vulnerability in Oracle Coherence (a data caching product) affects multiple versions and allows attackers without credentials to take control of the system through network access. The vulnerability has a CVSS score (a 0-10 severity rating) of 9.8, meaning it is extremely severe and impacts confidentiality (keeping data secret), integrity (preventing unauthorized changes), and availability (keeping systems running).
Vulnerability Details
CVSS Score
9.8(critical)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
network
Attack Complexity
low
Privileges Required
none
User Interaction
none
Disclosure Date
July 21, 2026
Classification
Attack SophisticationModerate
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-60215
First tracked: July 22, 2026 at 02:07 AM
Classified by LLM (prompt v3) · confidence: 95%