CVE-2026-73949 Oracle Corporation CVE debrief

Who should care

Oracle WebCenter Portal administrators, security teams, and IT professionals responsible for maintaining and securing Oracle WebCenter Portal instances should care about this vulnerability. They should assess their exposure, apply patches, and monitor for suspicious activity. Additionally, they should review and update security configurations to prevent similar vulnerabilities in the future.

Why it matters

Defenders should care about CVE-2026-73949 because it allows low-privileged attackers to compromise Oracle WebCenter Portal, potentially leading to a takeover. Administrators and security teams should assess exposure, apply patches, and monitor for suspicious activity.

• Potential takeover of Oracle WebCenter Portal instances
• Compromise of confidentiality, integrity, and availability

Technical summary

The vulnerability is in the Portlet Services component of Oracle WebCenter Portal, affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows low-privileged attackers with network access via HTTP to compromise the product, potentially leading to a takeover. The vulnerability has a CVSS score of 8.8, indicating a high severity. The CVSS vector is (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability can result in a takeover of Oracle WebCenter Portal instances, compromising confidentiality, integrity, and availability.

Defensive priority

High priority for Oracle WebCenter Portal administrators and security teams to assess exposure and apply patches.

Recommended defensive actions

• Assess exposure of Oracle WebCenter Portal instances
• Apply patches or updates provided by Oracle
• Monitor for suspicious activity
• Review and update security configurations
• Perform a thorough review of the affected systems
• Check for any unusual activity
• Implement additional security measures

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability, affected versions, and CVSS score. The vulnerability is in the Portlet Services component of Oracle WebCenter Portal. The CVE record was published on 2026-09-15T20:17:46.023Z and has not been modified since then. There are no known exploits or reports of this vulnerability being used in attacks. However, defenders should verify the affected versions and assess their exposure to this vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.