# CVE-2026-83043: Oracle WebCenter Portal remote code execution in Composer

Source: https://junglewise.ai/threats/cve-2026-83043-oracle-webcenter-portal-remote-code-execution-in-composer  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-15. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-83043 · Severity: critical · CVSS 9.6 · Published 2026-09-15

Oracle WebCenter Portal is a collaborative web application platform used for enterprise content and team workspaces. This vulnerability allows an unauthenticated attacker to fully compromise the portal through a network exploit requiring minimal user interaction, potentially affecting connected systems and risking unauthorized access to sensitive business data and collaboration content.

Technologies: [Oracle WebCenter Portal](https://junglewise.ai/threats/technologies/webcenter-portal). Vendors: [Oracle](https://junglewise.ai/threats/vendors/oracle).

## Quick answers

**Is CVE-2026-83043 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-83043 being exploited in the wild.

**How severe is CVE-2026-83043?** Critical severity, with a CVSS score of 9.6, published 15 September 2026.

**Which products and versions are affected?** Oracle WebCenter Portal 12.2.1.4.0, 14.1.2.0.0.

**Is there a fix for CVE-2026-83043?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-83043 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-83043?** Check whether you run Oracle WebCenter Portal at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is a remote code execution vulnerability in the Composer component of Oracle WebCenter Portal accessible via HTTP. The vulnerability is easily exploitable by unauthenticated network attackers but requires social engineering or user interaction from a non-attacker. Successful exploitation results in complete system compromise with impacts to confidentiality, integrity, and availability. The scope changes, meaning attacks on this component can significantly impact other connected products within the Fusion Middleware stack. Patches are available from Oracle's security updates.

## Affected products

- Oracle WebCenter Portal 12.2.1.4.0, 14.1.2.0.0

## Timeline

- 2026-09-15: disclosed

## References

- [https://www.oracle.com/security-alerts/cspusep2026.html](https://www.oracle.com/security-alerts/cspusep2026.html)

## Related threats

- [Oracle WebCenter Portal information disclosure in Runtime Tools](https://junglewise.ai/threats/cve-2026-91248-vulnerability-in-the-oracle-webcenter-portal-product-of-oracle)
- [Oracle WebCenter Portal authorization bypass in Runtime Tools](https://junglewise.ai/threats/cve-2026-91247-vulnerability-in-the-oracle-webcenter-portal-product-of-oracle)
- [Oracle WebCenter Portal cross-site request forgery in Runtime Tools](https://junglewise.ai/threats/cve-2026-91246-vulnerability-in-the-oracle-webcenter-portal-product-of-oracle)
- [Oracle WebCenter Portal information disclosure in Runtime Tools](https://junglewise.ai/threats/cve-2026-91245-vulnerability-in-the-oracle-webcenter-portal-product-of-oracle)
- [Oracle WebCenter Portal compromise via adjacent network access](https://junglewise.ai/threats/cve-2026-83065-oracle-webcenter-portal-compromise-via-adjacent-network-access)