Summary
Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.
- Vendor
- Oracle
- Product
- WebLogic Server
- Added to KEV
- Jun 1, 2026
- Remediation due
- Jun 4, 2026 (US federal deadline)
- Ransomware use
- Not known
- EPSS
- 74.2% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References