CERT24CVE-2026-91218: Critical access-control vulnerability in Oracle SOA SuiteLoading data…
CERT24Threat Observatory
Period

CVE-2026-91218: Critical access-control vulnerability in Oracle SOA Suite

A vulnerability in the Fabric Layer component of Oracle SOA Suite affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit the vulnerability. Successful attacks may allow unauthorized creation, deletion, and modification of critical data or all data accessible to Oracle SOA Suite, as well as unauthorized access to that data.

← Back to intelligence

CVE-2026-91218: Critical access-control vulnerability in Oracle SOA Suite

A vulnerability in the Fabric Layer component of Oracle SOA Suite affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit the vulnerability. Successful attacks may allow unauthorized creation, deletion, and modification of critical data or all data accessible to Oracle SOA Suite, as well as unauthorized access to that data.