Oracle Fusion Middleware: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-2894262 linked CVEs
Open advisory with all CVEs
More on Middleware
Other advisories
- Not ratedosv:CLEANSTART-2026-KV71005http-proxy-middleware is node
- Not ratedosv:CLEANSTART-2026-GS52627body-parser is body parsing middleware for Node
- Not ratedosv:CLEANSTART-2026-CA23047In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http
- Not ratedCVE-2026-125729Plack-Middleware-CSP: Cross-Site-Scripting (XSS)
- Not ratedCVE-2026-125729Plack-Middleware-CSP: Cross-Site-Scripting (XSS)
- Not ratedCVE-2026-125729Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never enforce it.
- Not ratedosv:CVE-2026-123528Vikunja before 2.7.1 Insufficient Session Expiration via HTTP Token Middleware
- Not ratedosv:CLSA-2026-1794061291TuxCare security update for webpack-dev-middleware (1 CVE)
Other news entries
- NCSC-2026-0448 [1.00] [H/H] Kwetsbaarheden verholpen in Oracle Fusion MiddlewareNewsNCSC-NL
- Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPUNewsSecurityWeek
- Oracle Fusion Middleware: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Oracle Fusion Middleware: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- SWIFT Banking & Government Middleware Enables RCENewsDark Reading
- Oracle’s September patches put Fusion Middleware back in the hot seatNewsCSO Online
- NCSC-2026-0377 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Enterprise ManagerNewsNCSC-NL
- NCSC-2026-0372 [1.00] [H/H] Kwetsbaarheden verholpen in Oracle Fusion MiddlewareNewsNCSC-NL
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2894
ID