CVE-2026-60261 in Coherence
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 07/22/2026
The vulnerability under discussion represents a critical security flaw within Oracle Coherence, a distributed caching and processing platform that forms part of Oracle Fusion Middleware. This issue manifests in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, indicating a widespread impact across multiple release streams of the software. The vulnerability's classification as easily exploitable suggests that attackers require minimal technical expertise or resources to leverage this weakness effectively.
The technical nature of this flaw lies in the insufficient authentication mechanisms within Oracle Coherence's communication protocols, creating an attack surface where unauthenticated adversaries can gain access to systems running the vulnerable software. The attack vector specifically requires physical access to the communication segment connected to the hardware hosting Oracle Coherence, which represents a significant operational concern as it implies that attackers who have gained physical proximity or network access to the infrastructure can potentially exploit this vulnerability without prior authentication credentials. This configuration essentially removes traditional access control barriers from the equation.
The operational impact of successful exploitation is severe and encompasses complete system compromise of Oracle Coherence instances. When an attacker successfully exploits this vulnerability, they gain full control over the affected Oracle Coherence system, which can lead to unauthorized data access, modification, or deletion across distributed caching environments. This represents a high-impact scenario where attackers can manipulate application data flows, potentially disrupting business operations and affecting multiple dependent systems that rely on Coherence for caching and processing functions.
The CVSS 3.1 score of 8.8 reflects the severity of this vulnerability across all three core security properties: confidentiality, integrity, and availability. The high impact scores across all dimensions indicate that an attacker could potentially access sensitive data, modify system configurations or data, and cause service disruptions that would severely affect business operations. The attack complexity is rated as low (AC:L) given the minimal prerequisites required for exploitation, while the lack of privilege requirements (PR:N) and user interaction (UI:N) further compounds the threat. The vulnerability affects an unscoped environment (S:U), meaning the compromise can extend beyond the immediate system to impact the broader network infrastructure.
Organizations should implement immediate mitigation strategies including network segmentation to isolate Oracle Coherence instances from unauthorized physical access, deployment of intrusion detection systems to monitor for suspicious communication patterns on the affected segments, and application of Oracle's official security patches as soon as they become available. The vulnerability's characteristics align with CWE-287, which addresses improper authentication issues, and represents a significant concern from an ATT&CK framework perspective under the privilege escalation and persistence categories. Given the potential for complete system takeover, organizations should also conduct thorough security assessments of their distributed systems to identify other potential attack vectors that could be leveraged in conjunction with this vulnerability.