unauthenticated

1 article · newest first

NVD detail for CVE-2026-60198 showing a 9.8 CRITICAL Oracle WebLogic RCE

Oracle just patched five separate 9.8 bugs that hand WebLogic to an anonymous attacker. patch all of them

CVE-2026-60198 and four siblings let an unauthenticated attacker take over Oracle WebLogic Server over T3, IIOP, HTTP or SOAP. Five critical holes, one July patch — here's what to do.

Priya Nair · 2d ago · 9 min