CVE-2026-60528 Oracle Corporation CVE debrief

Who should care

Administrators and security teams responsible for Oracle WebLogic Server installations should be aware of this vulnerability and take immediate action to mitigate potential risks. This includes reviewing system configurations, ensuring proper patching, and monitoring for suspicious activity. Additionally, security teams should prioritize patching or mitigating this vulnerability, as it can be exploited by high-privileged attackers with network access via HTTP.

Technical summary

The vulnerability is located in the Console component of Oracle WebLogic Server, affecting versions 14.1.2.0.0 and 15.1.1.0.0. It has a CVSS 3.1 Base Score of 7.6, indicating high confidentiality and integrity impacts. The CVSS Vector is (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N). Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all Oracle WebLogic Server accessible data, as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. This vulnerability allows high-privileged attackers with network access via HTTP to compromise the server.

Defensive priority

High priority should be given to patching or mitigating this vulnerability, as it can be exploited by high-privileged attackers with network access via HTTP.

Recommended defensive actions

• Apply the latest security patches from Oracle as soon as possible.
• Restrict network access to the Oracle WebLogic Server Console.
• Monitor for suspicious activity and implement additional security measures to detect potential exploitation attempts.
• Consider implementing compensating controls, such as Web Application Firewalls (WAFs), to help protect against exploitation.
• Review system configurations to ensure proper patching.
• Prioritize patching or mitigating this vulnerability, as it can be exploited by high-privileged attackers with network access via HTTP.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record was published on 2026-07-21T22:17:52.510Z and was last modified on 2026-07-25T05:16:40.843Z. The NVD entry is currently Undergoing Analysis. Oracle has provided a security alert for this vulnerability (reference: https://www.oracle.com/security-alerts/cpujul2026.html).

Official resources