CVE-2026-46782: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)

Synopsis

A critical-severity vulnerability affecting the Client Bundle component of Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware) allows a low-privileged attacker to compromise the product over HTTP without any victim interaction. The flaw carries a scope change, meaning successful exploitation can impact systems beyond WebCenter Enterprise Capture itself, and results in full takeover, including complete read, write, and availability control. No fix versions have been published; HarborGuard tracks this advisory and will surface a patched-image rebuild the moment Oracle releases one.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the WebCenter Enterprise Capture service over the network via HTTP; no local or physical access is needed.

• AuthenticationRequired

  Any low-privilege account is sufficient; no administrative or elevated credentials are required to trigger the vulnerability.

• Victim interactionNot required

  No user action is needed; the attacker can carry out the attack entirely without involving another person.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special environmental conditions, race timing, or memory-layout knowledge.

Blast Radius

• A successful attacker reads all data accessible to the WebCenter Enterprise Capture service, including captured documents, stored credentials, and session tokens.
• The attacker can modify or delete persisted data managed by the Client Bundle component, corrupting document capture workflows and stored records.
• The attacker can crash or render the WebCenter Enterprise Capture service unavailable, halting document ingestion pipelines.
• Because the CVSS scope is changed, additional products sharing infrastructure or trust relationships with WebCenter Enterprise Capture are reachable from the same exploit session.