CVE-2026-91467
MediumCVSS 6.6Summary
Vulnerability in Oracle Fusion Middleware Control (component Framework) versions 12.2.1.4.0 and 14.1.2.0.0. An attacker with physical access can, with user interaction, take over Oracle Fusion Middleware Control.
Risk Assessment
An attacker with physical access and user interaction could take over the system, potentially leading to full compromise of confidentiality, integrity, and availability.
Recommendation
Update Oracle Fusion Middleware Control to the version containing Oracle's fix. Restrict physical access to workstations and servers with this component.
Other vulnerabilities in Oracle Fusion Middleware Control
See all- CVE-2026-83346Medium
Vulnerability in the Oracle Fusion Middleware Control product (component: Framework), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can exploit it, requiring human interaction, and attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
- CVE-2026-83069High
Vulnerability in Oracle Fusion Middleware Control (component: Framework) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can exploit it over HTTP, potentially leading to full takeover. CVSS score is 8.8, indicating high impact on confidentiality, integrity, and availability.
Original NVD description (English source)
Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows physical access to compromise Oracle Fusion Middleware Control. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Fusion Middleware Control. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS