Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java. While the vulnerability is in Oracle Platform Security for Java, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-07-22 | 3 | Disclosure1General1Patch1 |
| 2026-07-23 | 3 | Disclosure1Patch2 |
| 2026-07-26 | 1 | Patch1 |
| 2026-07-31 | 1 | Disclosure1 |
| 2026-08-02 | 1 | Disclosure1 |
| 2026-08-04 | 1 | General1 |
CVE-2026-60366 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affe… https://www.cve.org/CVERecord?id=CVE-2026-60366
Post summary
The post announces CVE-2026-60366 for an Oracle product, listing the impacted component and versions, but offers no PoC, exploit, mitigation, or evidence of active exploitation.
🚨 CVE-2026-60366 — CVSS 10/10 ██████████ Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/h7pqBe92vJ
Post summary
The tweet warns about CVE‑2026‑60366, a critical 10/10 flaw in Oracle Fusion Middleware, and urges users to apply the available patch immediately.
【緊急】CVE-2026-60366 OracleのOracle Fusion Middlewareに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/30/cve-2026-60366-oracle-fusion-middleware/ #IT #Security #cybersecurity
Post summary
The tweet alerts about a new CVE affecting Oracle Fusion Middleware but provides no technical details, PoC, or evidence of active exploitation, thus it falls under a general notice category.
【緊急】CVE-2026-60366 OracleのOracle Fusion Middlewareに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/30/cve-2026-60366-oracle-fusion-middleware/ #IT #Security #cybersecurity
Post summary
The post alerts that CVE-2026-60366 is a critical issue in Oracle Fusion Middleware, urging immediate response, but provides no technical, exploit, or patch details.
【緊急】CVE-2026-60366 OracleのOracle Fusion Middlewareに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/30/cve-2026-60366-oracle-fusion-middleware/ #IT #Security #cybersecurity
Post summary
The post alerts readers to a critical vulnerability (CVE-2026-60366) in Oracle Fusion Middleware, urging immediate action but providing no detailed technical information, PoC, or patch guidance.
☕ Oracle Fusion Middleware CVSS 10 critical: CVE-2026-60366 hits the Centralized Thirdparty Jars component in Platform Security for Java 12.2.1.4.0 & 14.1.2.0.0. No auth, full C/I/A. Patch now. #cybersecurity #ciso #cto #vulnerabilities #msp https://secalerts.co/vulnerability/CVE-2026-60366?utm_campaign=x https://t.co/lrIfvk9sRk
Post summary
Oracle Fusion Middleware CVE-2026-60366 is a critical (CVSS 10) vulnerability affecting the Centralized Thirdparty Jars component with no authentication required and full confidentiality, integrity, and availability impact, for which a patch is immediately available.
🚨High - Oracle Platform Security for Java Takeover via SOAP (CVE-2026-60368) Oracle's July 2026 Critical Patch Update fixes another flaw in Oracle Platform Security for Java (Fusion Middleware, component "Centralized Thirdparty Jars"). Per Oracle, it is easily exploitable and lets a low-privileged attacker with SOAP network access compromise OPSS, resulting in full takeover. It's the SOAP-vector sibling of CVE-2026-61246 (HTTP) and part of the same OPSS cluster that also includes the unauthenticated 10.0 CVE-2026-60366. Since OPSS underpins WebLogic and Fusion applications, compromise of this security layer is high-impact. CVSS 8.8. 👉Affected: OPSS 12.2.1.4.0 and 14.1.2.0.0. Apply the Oracle July 2026 Critical Patch Update.
Post summary
Oracle has released the July 2026 Critical Patch Update to fix CVE-2026-60368, a SOAP-based takeover flaw in Oracle Platform Security for Java with CVSS 8.8, and users are urged to apply the patch to remediate the vulnerability.
🚨Critical - Oracle Platform Security for Java Unauthenticated Takeover (CVE-2026-60366) Oracle's July 2026 Critical Patch Update fixes a maximum-severity flaw in Oracle Platform Security for Java (Fusion Middleware, component "Centralized Thirdparty Jars"). Per Oracle, it is easily exploitable and lets an unauthenticated attacker with HTTP network access compromise OPSS, resulting in full takeover. The vulnerability is scope-changing: attacks may significantly impact additional products beyond OPSS itself. Since OPSS underpins WebLogic and Fusion applications, this is a critical exposure for those stacks. CVSS 10.0. 👉Affected: OPSS 12.2.1.4.0 and 14.1.2.0.0. Apply the Oracle July 2026 Critical Patch Update immediately.
Post summary
Oracle issued a July 2026 critical patch for CVE‑2026‑60366, a CVSS 10.0 unauthenticated Java component flaw affecting OPSS, urging immediate update.
CVE-2026-60366 Critical Remote Code Execution in Oracle Platform Security for Ja... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-60366 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet announces the discovery of a critical remote code execution vulnerability (CVE‑2026‑60366) in Oracle Platform Security, but provides no additional technical details, exploit code, or mitigation information.
🚨*CVE* CVE-2026-60366 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affe… https://www.cve.org/CVERecord?id=CVE-2026-60366 ----- Traducción: CVE-2026-60366 Vul… http://infoflow.cloud`
Post summary
The post merely references the CVE record and notes the affected product, providing no additional technical or exploitation information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oracle | platform_security_for_java | 12.2.1.4.0 | - | - |
| App | oracle | platform_security_for_java | 14.1.2.0.0 | - | - |