Loading vulnerability…
Oracle Coherence Core Unauthenticated Remote Takeover
CVE-2026-60217 is an easily exploitable, unauthenticated network vulnerability in the Core component of Oracle Coherence, an Oracle Fusion Middleware product. A remote attacker with TCP network access can compromise an affected Oracle Coherence deployment. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The underlying weakness type has not been assigned a CWE identifier.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation enables complete takeover of Oracle Coherence, with high impact to confidentiality, integrity, and availability. The scope may extend beyond the Coherence instance to additional connected products or applications, potentially enabling unauthorized access to, modification or deletion of, affected data and disruption of dependent business services.
If you can’t patch tonight, do this now.
Where immediate patching is not possible, restrict TCP connectivity to Oracle Coherence to only explicitly authorized hosts and application tiers using network segmentation and firewall or access-control rules. Remove unnecessary public or broad network exposure and monitor reachable Coherence services for suspicious connection activity. These measures reduce exposure but do not remediate the vulnerability.
Patch, then assume compromise.
Apply the Oracle security update provided in the July 2026 Critical Patch Update for Oracle Coherence, or upgrade to an Oracle-supported release containing the vendor fix. Prioritize remediation of affected Coherence deployments reachable over TCP, particularly systems exposed to untrusted or broad internal networks.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.