CVE-2026-91346

The record

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Outside In Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).

Affected packages

Related vulnerabilities

• CVE-2026-63339 IXP Manager is a full-stack web application for managing Internet Exchange Points. CWE-20
• CVE-2026-62958 libriscv is a RISC-V sandbox and emulator. CWE-20
• CVE-2026-119342 Stirling-PDF is a locally hosted web application that facilitates various operations on… CWE-20
• CVE-2026-119339 Tesseract is an open source OCR engine. CWE-20
• CVE-2026-62335 OpenVM is a performant and modular zkVM framework built for customization and… CWE-20
• CVE-2026-62337 SNARK Verifier is a generic (S)NARK verifier. CWE-20
• CVE-2026-62333 OpenVM is a performant and modular zkVM framework built for customization and… CWE-20
• CVE-2026-61618 SNARK Verifier is a generic (S)NARK verifier. CWE-20