CVE-2026-83410: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar
highvulnerability
security
Summary
A serious vulnerability exists in Oracle Coherence (a data management product used in Oracle Fusion Middleware) that allows an attacker with low-level network access to take complete control of the system. The flaw affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, and has a CVSS score (a 0-10 rating of how severe a vulnerability is) of 8.8, indicating high risk to confidentiality, integrity, and availability of data.
Vulnerability Details
CVSS Score
8.8(high)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
network
Attack Complexity
low
Privileges Required
low
User Interaction
none
Disclosure Date
September 15, 2026
Classification
Attack SophisticationModerate
Impact (CIA+S)
confidentialityintegrityavailability
Affected Vendors
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-83410
First tracked: September 15, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 62%