Is CVE-2026-83114 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-83114 being exploited in the wild.

How severe is CVE-2026-83114?

High severity, with a CVSS score of 7.5, published 15 September 2026.

Which products and versions are affected?

Oracle E-Business Suite Quality 12.2.3-12.2.15.

Is there a fix for CVE-2026-83114?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Am I affected by CVE-2026-83114?

Check whether you run Oracle E-Business Suite Quality at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-83114: Oracle Quality privilege escalation in Oracle E-Business Suite

CVE-2026-83114 · Severity: high · CVSS 7.5 · Published 2026-09-15

Oracle Quality is a quality management module within Oracle's E-Business Suite used for managing product quality and manufacturing operations. A vulnerability in this component allows a low-privileged network user to gain complete control over the Quality system, potentially compromising critical quality and operational data, disrupting manufacturing workflows, and enabling tampering with quality records.

Technologies: Oracle E-Business Suite Quality. Vendors: Oracle.

Quick answers

Is CVE-2026-83114 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-83114 being exploited in the wild.
How severe is CVE-2026-83114?: High severity, with a CVSS score of 7.5, published 15 September 2026.
Which products and versions are affected?: Oracle E-Business Suite Quality 12.2.3-12.2.15.
Is there a fix for CVE-2026-83114?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2026-83114?: Check whether you run Oracle E-Business Suite Quality at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is a privilege escalation vulnerability in the Oracle Quality component of Oracle E-Business Suite affecting versions 12.2.3 through 12.2.15. The vulnerability requires low privilege credentials and network access via HTTP, but is difficult to exploit (high complexity). An authenticated attacker can leverage this flaw to escalate privileges and achieve full compromise of the Oracle Quality system, impacting confidentiality, integrity, and availability of quality management functions. Oracle has released patches as part of their September 2026 security update.

Affected products

Oracle E-Business Suite Quality 12.2.3-12.2.15

Timeline

2026-09-15: disclosed: CVE-2026-83114 published

References

https://www.oracle.com/security-alerts/cspusep2026.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.