CVE-2026-35263General(oracle / weblogic_server)

LOWCVSS 9.9 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch oracle weblogic_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebLogic Server. While the vulnerability is in WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of WebLogic Server. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

oracle CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.oracle.com/security-alerts/cspujun2026.html

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

weblogic_server

Threat summary

Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
General: 3 classified signals
Disclosure: 1 classified signal
Peaked 1d ago at 2 mentions (2026-07-04); latest day: 2
5 total mentions across 3 days

Affected systems

Vendors

oracle

Products

weblogic_server

2 versions affected across 1 product

Deep dive

Activity timeline5 mentions / 3d

Signal classification3 categories

General

360.0%

Disclosure

120.0%

Patch

120.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-26	1	Disclosure1
2026-07-04	2	General2
2026-07-06	2	General1Patch1

Full discourse5 posts

SecEngCyGy@snypet8680d
Patch
Critical RCE vulnerability CVE-2026-35263 affects Oracle WebLogic Server 14.1.2.0.0 and 15.1.1.0.0. Patch immediately to prevent full server takeover. https://www.oracle.com/security-alerts/cspujun2026.html #CyberSecurity #Oracle #Vulnerability
Post summary
The message highlights a critical RCE in Oracle WebLogic Server and urges prompt patching, referencing Oracle’s official security advisory.
0000058
20 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker80d
General
【緊急】CVE-2026-35263 OracleのWebLogic Serverに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-35263-weblogic-server/ #IT #Security #cybersecurity
Post summary
The text is a brief alert about CVE-2026-35263 against Oracle WebLogic Server, but it lacks any technical details, exploit code, or patch information.
0000054
210 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker82d
General
【緊急】CVE-2026-35263 OracleのWebLogic Serverに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-35263-weblogic-server/ #IT #Security #cybersecurity
Post summary
The tweet alerts to CVE-2026-35263, a serious flaw in Oracle WebLogic Server, urging urgent action, but provides no detailed technical or mitigation information.
0000049
209 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker83d
General
【緊急】CVE-2026-35263 OracleのWebLogic Serverに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-35263-weblogic-server/ #IT #Security #cybersecurity
Post summary
The post announces CVE-2026-35263 for Oracle WebLogic with a call for urgent action, but offers no technical or patch details in the provided text.
0000067
209 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker91d
Disclosure
【緊急】CVE-2026-35263 OracleのWebLogic Serverに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/06/24/cve-2026-35263-weblogic-server/ #IT #Security #cybersecurity
Post summary
The post alerts readers to a severe vulnerability (CVE-2026-35263) in Oracle WebLogic Server that requires immediate attention, but offers no detailed technical information or mitigation guidance.
0000047
208 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	oracle	weblogic_server	14.1.2.0.0	-	-
App	oracle	weblogic_server	15.1.1.0.0	-	-

Explore more

Back to dashboard oracle CVEs weblogic_server vulnerabilities

What researchers are saying

CVE-2026-35263

SecEngCyGy[verified]@snypet86Patch

The message highlights a critical RCE in Oracle WebLogic Server and urges prompt patching, referencing Oracle’s official security advisory.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerGeneral

The text is a brief alert about CVE-2026-35263 against Oracle WebLogic Server, but it lacks any technical details, exploit code, or patch information.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerGeneral

The tweet alerts to CVE-2026-35263, a serious flaw in Oracle WebLogic Server, urging urgent action, but provides no detailed technical or mitigation information.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerGeneral

The post announces CVE-2026-35263 for Oracle WebLogic with a call for urgent action, but offers no technical or patch details in the provided text.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The post alerts readers to a severe vulnerability (CVE-2026-35263) in Oracle WebLogic Server that requires immediate attention, but offers no detailed technical information or mitigation guidance.