CVE-2026-46773

Critical · CVSS 9.8

Oracle Unified Directory (OUD) — Improper Access Control / Unauthenticated LDAP Remote Takeover (CWE-284)

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; CWE-284

Description

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in takeover of Oracle Unified Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Search profile — drives PoC discovery

Symbols OUD CoreOracle Unified DirectoryLDAPunauthenticatedCVE-2026-4677312.2.1.4.014.1.2.1.0OUD

Keywords CVE-2026-46773Oracle Unified Directory exploitOUD LDAP unauthenticated RCEOracle Unified Directory PoCOUD Core takeoverOracle Fusion Middleware LDAP exploitCVE-2026-46773 PoCOracle Unified Directory 12.2.1.4.0 vulnerabilityOracle Unified Directory 14.1.2.1.0 vulnerability

Versions: 12.2.1.4.0 and 14.1.2.1.0

References

https://www.oracle.com/security-alerts/cspujun2026.html

Status: enriched · ingested 2026-06-19T00:00:04.000Z · profiled 2026-06-19T00:30:04.000Z