CVE-2026-83412: 
Oracle Coherence vulnerability analysis and mitigation

CVE-2026-83412 is an authorization bypass vulnerability in the Core component of Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability was disclosed on September 15, 2026, as part of Oracle's Critical Security Patch Update (CSPU). It carries a CVSS v3.1 base score of 8.1 (High) (Oracle Advisory).

The vulnerability is classified as an authorization bypass (CWE not explicitly specified by Oracle, but consistent with improper access control) in the Core component of Oracle Coherence. A low-privileged attacker with network access via TCP can exploit this vulnerability without requiring user interaction, making it easily exploitable under low attack complexity conditions. The attack vector is network-based, and no additional privileges beyond a basic authenticated account are required to initiate exploitation (Oracle Advisory).

Successful exploitation allows a low-privileged attacker to gain unauthorized read access to all Oracle Coherence accessible data (high confidentiality impact) and to create, delete, or modify critical data within the Coherence data grid (high integrity impact). Availability is not impacted. Given that Oracle Coherence is commonly used as a distributed caching and data grid layer in enterprise Java applications, exploitation could expose sensitive application data and allow tampering with cached or persisted business-critical information (Oracle Advisory).

As of the disclosure date, there is no public proof-of-concept exploit and no evidence of in-the-wild exploitation (Oracle Advisory). The EPSS score is approximately 0.39%, indicating a low current probability of exploitation in the wild. The vulnerability is detectable by Qualys (detection ID 388781) and has been covered by Tenable (Nessus plugin 346314). It is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Oracle has released a patch for CVE-2026-83412 as part of the September 2026 Critical Security Patch Update, available as of September 15, 2026. Administrators should apply the patch immediately by following the guidance in the Fusion Middleware patch availability documentation linked from the Oracle advisory. As a temporary workaround, Oracle recommends restricting TCP network access to Oracle Coherence services to trusted hosts only and implementing network segmentation to limit exposure to low-privileged users. Oracle strongly advises against treating network blocking as a long-term solution, as it does not address the underlying vulnerability (Oracle Advisory).

The vulnerability was flagged by AusCERT (bulletin ASB-2026.0229) and covered by Tenable via Nessus plugin 346314 shortly after Oracle's disclosure. No notable independent researcher commentary or significant social media discussion has been identified beyond standard patch advisory coverage (Oracle Advisory).