THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-60276 (CRITICAL 9.8) — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

[NVD] CVE-2026-60276 (CRITICAL 9.8) — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

mednvdPublished 2026-07-21

CVE-2026-60276 CVSS: 9.8 CRITICAL Published: 2026-07-21T22:17:29.903

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Coherence. Successful atta

Indicators of compromise

CVE-2026-60276cve
12.2.1.4ipv4
14.1.1.0ipv4
14.1.2.0ipv4
15.1.1.0ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-60276