Vulnerability Report

CVE-2026-60644

Title: CVE-2026-60644

Auth Bypass

Proof Of Concept

No public PoC currently indexed for CVE-2026-60644.

CWE Category NVD-CWE-noinfo

Published Date Jul 21, 2026

Modified Date Jul 29, 2026

Exploit Status Not Found

Score 10.0 CVSS v3.1

Exploit Probability (EPSS)

0.51%

Vulnerability Summary

CVE-2026-60644: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

Impacted Vendors

oracle 1

Reference Links

https://www.oracle.com/security-alerts/cpujul2026.html

CVSS v3.1

Source Entity [email protected]

Severity CRITICAL

10.0

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns