# CERT-FR Flags Multiple Oracle WebLogic CVEs

Published: 2026-10-21 · Severity: elevated · Sectors: Technology
Canonical: https://vorant.io/reports/00213a8d-60ae-5580-85f3-002a8aa2429d/cert-fr-flags-multiple-oracle-weblogic-cves

> CERT-FR advisory lists numerous vulnerabilities in Oracle WebLogic Server and Proxy Plug-in enabling remote DoS, data integrity and confidentiality breaches.

CERT-FR has published an advisory summarizing Oracle's October 2026 Critical Patch Update (CPU) for WebLogic products, covering a large set of CVEs affecting Oracle WebLogic Server Proxy Plug-in (versions 12.2.1.4.0 and 14.1.2.0.0) and Oracle WebLogic Server (versions 12.2.1.4.0, 14.1.2.0.0, and 15.1.1.0.0). The vulnerabilities collectively allow an attacker to cause remote denial of service, and to compromise the confidentiality and integrity of data. No specific exploitation details, proof-of-concept code, or in-the-wild exploitation are mentioned in the advisory.

The advisory does not provide technical details per CVE, is limited to risk categorization and affected product/version listing, and directs readers to Oracle's own CPU bulletin (cpuoct2026) for patch information. Given WebLogic's common use in enterprise Java application environments, organizations running the affected versions should prioritize applying Oracle's October 2026 patches.

Defenders should inventory WebLogic Server and Proxy Plug-in deployments against the listed affected versions, apply the Oracle CPU patches promptly, and monitor for anomalous WebLogic traffic or service disruptions pending patch deployment. As this is a batch CVE disclosure tied to a vendor's regular patch cycle rather than evidence of active exploitation, treat as a standard patch management priority unless further intelligence indicates in-the-wild attacks.

## Mentioned in this report

- Vulnerabilities: CVE-2023-43622, CVE-2025-7962, CVE-2026-101515, CVE-2026-12817, CVE-2026-41838, CVE-2026-41839, CVE-2026-41840, CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41845, CVE-2026-41846, CVE-2026-41848, CVE-2026-41850, CVE-2026-41851, CVE-2026-41852, CVE-2026-41853, CVE-2026-41854, CVE-2026-41855, CVE-2026-49844, CVE-2026-59645, CVE-2026-83379, CVE-2026-83399, CVE-2026-87300, CVE-2026-87302, CVE-2026-91323, CVE-2026-91502, CVE-2026-9563

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1355

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/00213a8d-60ae-5580-85f3-002a8aa2429d/cert-fr-flags-multiple-oracle-weblogic-cves.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup