Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-07-22 | 2 | General2 |
| 2026-07-23 | 2 | Patch2 |
| 2026-07-29 | 1 | Patch1 |
🚨 HIGH SEVERITY: CVE-2026-61246 CVSS 8.8 - Oracle Platform Security for Java vulnerability allows low-priv attackers to achieve full system takeover via HTTP. Affected: 12[.]2[.]1[.]4.0, 14[.]1[.]2[.]0.0 Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/bb6BIqbAc3
Post summary
The tweet announces a high‑severity CVE-2026-61246 affecting Oracle Java platforms, provides technical details and an urgent patch recommendation.
🚨High - Oracle Platform Security for Java Takeover via SOAP (CVE-2026-60368) Oracle's July 2026 Critical Patch Update fixes another flaw in Oracle Platform Security for Java (Fusion Middleware, component "Centralized Thirdparty Jars"). Per Oracle, it is easily exploitable and lets a low-privileged attacker with SOAP network access compromise OPSS, resulting in full takeover. It's the SOAP-vector sibling of CVE-2026-61246 (HTTP) and part of the same OPSS cluster that also includes the unauthenticated 10.0 CVE-2026-60366. Since OPSS underpins WebLogic and Fusion applications, compromise of this security layer is high-impact. CVSS 8.8. 👉Affected: OPSS 12.2.1.4.0 and 14.1.2.0.0. Apply the Oracle July 2026 Critical Patch Update.
Post summary
Oracle has announced that CVE-2026-60368, a SOAP‑based takeover flaw in OPSS with CVSS 8.8, has been fixed in the July 2026 Critical Patch Update, and users of affected versions should apply the patch immediately.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-61246](https://www.oracle.com/security-alerts/cpujul2026.html) Vulnerability in the Ora... https://www.oracle.com/security-alerts/cpujul2026.html #PatchManagement #Vulnerability #CVE
Post summary
The post announces the CVE and directs readers to Oracle’s patch advisory, suggesting the vulnerability has a vendor fix but provides no exploitation or technical details.
🚨*CVE* CVE-2026-61246 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affe… https://www.cve.org/CVERecord?id=CVE-2026-61246 ----- Traducción: Vulnerabilidad CVE… http://infoflow.cloud`
Post summary
The post simply references the CVE record for Oracle Fusion Middleware CVE-2026-61246 without providing further technical, exploit, or mitigation details.
CVE-2026-61246 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affe… https://www.cve.org/CVERecord?id=CVE-2026-61246
Post summary
The text only identifies CVE-2026-61246 within Oracle Fusion Middleware, offering no further technical detail, PoC, or mitigation information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oracle | platform_security_for_java | 12.2.1.4.0 | - | - |
| App | oracle | platform_security_for_java | 14.1.2.0.0 | - | - |