CVE-2026-60454High· 7.8▾ TwilightVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with log…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.1%
0.1% → 0.2%
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
http_server = 12.2.1.4.0http_server = 14.1.2.0.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-60530High· 7.8Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_http2.so)
CVE-2026-60438Critical· 9.1Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl)
CVE-2026-60363Critical· 9.8Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin)
CVE-2026-87273High· 8.6Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
CVE-2026-87272High· 7.8Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
CVE-2026-87271High· 7.8Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)