CVE-2026-91492 Oracle Corporation CVE debrief

Who should care

Defenders responsible for Oracle Identity Manager Connector instances, particularly those with network exposure, should assess their organization's exposure and implement necessary controls to prevent unauthorized data access or modification.

Why it matters

CVE-2026-91492 is a high-severity vulnerability in Oracle Identity Manager Connector that allows unauthenticated attackers to compromise data integrity and confidentiality. Defenders should prioritize verification of exposure and remediation, focusing on network access controls and Oracle Identity Manager Connector instances. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.1.0, with a CVSS score of 8.7.

• Potential unauthorized creation, deletion, or modification of critical data.
• Possible unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data.
• Need for verification of exposure and application of security patches.
• Potential scope change impacting additional products.

Technical summary

CVE-2026-91492 is a high-severity vulnerability in Oracle Identity Manager Connector, allowing unauthenticated attackers with network access via HTTP to compromise data integrity and confidentiality. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.1.0, with a CVSS score of 8.7. Defenders should prioritize verification of exposure and remediation, focusing on network access controls and Oracle Identity Manager Connector instances. The vulnerability can result in unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data.

Defensive priority

Defenders should prioritize verification of exposure and remediation, focusing on network access controls and Oracle Identity Manager Connector instances.

Recommended defensive actions

• Verify exposure of Oracle Identity Manager Connector instances, particularly versions 12.2.1.4.0 and 14.1.2.1.0.
• Implement network access controls to restrict HTTP access to Oracle Identity Manager Connector.
• Review and apply Oracle's security patches for affected versions.
• Monitor for suspicious activity related to unauthorized data access or modification.
• Conduct an inventory of affected assets to ensure comprehensive remediation.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Track exceptions and retest remediated assets.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, its impacts, and affected versions. However, additional information on exploitation and victim organizations is not available. The vulnerability has a CVSS score of 8.7 and affects Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. Defenders should verify exposure and apply security patches. The CVE record was published on 2026-10-20T22:20:53.733Z and has not been modified since then. No additional sources were consulted due to limited information on

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.