EXPOSURES › CVE-2026-60977
CVE-2026-60977
CRITICALUnauthenticated remote RMI exploitation allows full takeover of Oracle WebLogic Server instances.
An unauthenticated attacker can exploit this RMI vulnerability to completely compromise Oracle WebLogic Server, leading to full system takeover. DIB organizations must ensure all WebLogic deployments are patched immediately, as this critical flaw represents a severe exposure to data exfiltration, integrity compromise, and availability loss. Failure to patch leaves systems vulnerable to automated exploitation in the wild.
Shame score — A critical, unauthenticated remote code execution flaw in a widely deployed enterprise middleware product that enables complete system takeover.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
| PRODUCT | STATUS |
|---|---|
| Aconex for Defense Oracle |
Authorized |
| Federal Managed Cloud Services Oracle |
Authorized |
| Fusion Cloud Oracle |
Authorized |
| Government Cloud - Common Controls Oracle |
Authorized |
| Oracle Cloud Infrastructure-Government Cloud Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) - Moderate Oracle |
In Process |
| Oracle Service Cloud Oracle |
Authorized |
| Oracle Service Cloud (DOD) Oracle |
Authorized |
| Taleo Cloud - U.S. Government Cloud Oracle |
Authorized |