CVE-2026-87392 Oracle Corporation CVE debrief

Who should care

Defenders and administrators responsible for WebCenter Content: Imaging deployments, especially those with low-privileged user access via SOAP, should assess potential exposure and verify data integrity.

Why it matters

CVE-2026-87392 is a medium-severity vulnerability in WebCenter Content: Imaging 14.1.2.0.0 that allows low-privileged attackers to modify critical data via SOAP. Defenders should verify exposure, assess data integrity impacts, and prioritize patching or updates.

• Potential unauthorized data modifications
• Data integrity impacts on critical data
• Need for verifying 14.1.2.0.0 usage and exposure
• Prioritizing patching or updates for affected systems

Technical summary

A vulnerability in WebCenter Content: Imaging 14.1.2.0.0 allows low-privileged attackers with network access via SOAP to compromise the system, potentially leading to unauthorized creation, deletion, or modification of critical data or all accessible data. This medium-severity vulnerability has a CVSS score of 6.5 and a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). Defenders should prioritize verifying exposure and assessing potential data integrity impacts, especially in environments using WebCenter Content: Imaging 14.1.2.0.0.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential data integrity impacts, especially in environments using WebCenter Content: Imaging 14.1.2.0.0.

Recommended defensive actions

• Verify if WebCenter Content: Imaging 14.1.2.0.0 is in use and assess potential exposure.
• Review network access controls to limit low-privileged user access to SOAP services.
• Monitor for unauthorized data modifications within WebCenter Content: Imaging.
• Apply vendor patches or updates as available.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in WebCenter Content: Imaging 14.1.2.0.0, allowing low-privileged attackers with network access via SOAP to compromise the system and modify critical data.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.