Is CVE-2026-83063 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-83063 being exploited in the wild.

How severe is CVE-2026-83063?

High severity, with a CVSS score of 7.2, published 15 September 2026.

Which products and versions are affected?

Oracle Internet Directory 12.2.1.4.0, 14.1.2.1.0.

Is there a fix for CVE-2026-83063?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-83063 attacked?

It is attacked over the network.

Am I affected by CVE-2026-83063?

Check whether you run Oracle Internet Directory at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-83063: Oracle Internet Directory LDAP privilege escalation

CVE-2026-83063 · Severity: high · CVSS 7.2 · Published 2026-09-15

Oracle Internet Directory is a directory server component of Oracle Fusion Middleware used to manage user identities and access controls. A high-privileged authenticated attacker can exploit a network-accessible LDAP service to completely compromise the directory server, potentially affecting all systems and applications that rely on it for authentication and authorization.

Technologies: Oracle Internet Directory. Vendors: Oracle.

Quick answers

Is CVE-2026-83063 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-83063 being exploited in the wild.
How severe is CVE-2026-83063?: High severity, with a CVSS score of 7.2, published 15 September 2026.
Which products and versions are affected?: Oracle Internet Directory 12.2.1.4.0, 14.1.2.1.0.
Is there a fix for CVE-2026-83063?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-83063 attacked?: It is attacked over the network.
Am I affected by CVE-2026-83063?: Check whether you run Oracle Internet Directory at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability in the Oracle Internet Directory OID LDAP Server component affects versions 12.2.1.4.0 and 14.1.2.1.0. The issue is exploitable by a high-privileged attacker with network access to the LDAP service (attack vector: network, requires elevated privileges). Successful exploitation results in complete compromise of Oracle Internet Directory, affecting confidentiality, integrity, and availability of the directory service and dependent authentication systems. The vulnerability has a CVSS 3.1 score of 7.2 with a vector of AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. Patch status and specific technical details regarding the root cause are not disclosed in available references.

Affected products

Oracle Internet Directory 12.2.1.4.0, 14.1.2.1.0

Timeline

2026-09-15: disclosed

References

https://www.oracle.com/security-alerts/cspusep2026.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.