CVE-2026-46780 Oracle Corporation CVE debrief

Who should care

Organizations using Oracle WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0 should prioritize patching this vulnerability to prevent potential attacks. Security teams and vulnerability management teams should review the affected systems and plan for patching. IT teams and system administrators should also be aware of the vulnerability and take necessary actions to mitigate it.

Technical summary

The vulnerability, tracked as CVE-2026-46780, is located in the Core component of Oracle WebCenter Content: Imaging, a product of Oracle Fusion Middleware. It has a CVSS score of 8.8 and can be easily exploited by a low-privileged attacker with network access via HTTP. Successful exploitation can result in a takeover of the affected system. The vulnerability affects Oracle WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. Organizations should prioritize patching this vulnerability to prevent potential attacks. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high severity. To mitigate this vulnerability, it is essential to apply the patches provided by Oracle as soon as possible and restrict access to the affected system to only necessary personnel.

Defensive priority

High priority should be given to patching this vulnerability due to its high CVSS score and potential impact on affected systems.

Recommended defensive actions

• Apply the patches provided by Oracle as soon as possible
• Restrict access to the affected system to only necessary personnel
• Monitor the system for any suspicious activity
• Consider implementing additional security controls, such as web application firewalls
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record was published on 2026-06-17T10:53:55.570Z and was last modified on 2026-06-18T22:33:56.683Z. The NVD entry is currently Analyzed. Oracle WebCenter Content: Imaging is a product of Oracle Fusion Middleware that is vulnerable to this issue. The CVE record was published by the MITRE Corporation and is maintained by the National Vulnerability Database (NVD). The record has been analyzed and verified by the NVD.

Official resources