THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-60279 (CRITICAL 9.8) — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

[NVD] CVE-2026-60279 (CRITICAL 9.8) — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

mednvdPublished 2026-07-21

CVE-2026-60279 CVSS: 9.8 CRITICAL Published: 2026-07-21T22:17:30.270

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attac

Indicators of compromise

CVE-2026-60279cve
12.2.1.4ipv4
14.1.1.0ipv4
14.1.2.0ipv4
15.1.1.0ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-60279