CVE-2026-83048
Last modified
CVE-2026-83048 is a high-severity vulnerability rated 7.7/10 on the CVSS scale. Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.
Description
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | Oracle WebCenter Portal | 12.2.1.4.0; 14.1.2.0.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-83048?
How severe is CVE-2026-83048?
How do I fix CVE-2026-83048?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-83042Vulnerability in the Oracle Identity Manager product of Orac…9.8
- CVE-2026-83043Vulnerability in the Oracle WebCenter Portal product of Orac…9.6
- CVE-2026-83044Vulnerability in the Oracle XML Gateway product of Oracle E-…7.1
- CVE-2026-83045Vulnerability in the Oracle WebCenter Portal product of Orac…8.5
- CVE-2026-83046Vulnerability in the Oracle WebCenter Portal product of Orac…7.1
- CVE-2026-83047Vulnerability in the Oracle WebCenter Portal product of Orac…8.2
- CVE-2026-83049Vulnerability in the Oracle WebCenter Portal product of Orac…8.5
- CVE-2026-8305A vulnerability was detected in OpenClaw up to 2026.1.24. Th…9.8
- CVE-2026-83050Vulnerability in the Oracle WebCenter Portal product of Orac…7.1
- CVE-2026-83051Vulnerability in the Oracle WebCenter Portal product of Orac…7.5
- CVE-2026-83052Vulnerability in the Oracle WebCenter Portal product of Orac…7.6
- CVE-2026-83053Vulnerability in the Oracle WebCenter Portal product of Orac…8.8
Are you affected by CVE-2026-83048?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST