## Summary
CVE-2026-83059 is a critical, unauthenticated network vulnerability in Oracle Internet Directory (OID) LDAP Server within Oracle Fusion Middleware. A remote attacker with LDAP network access can compromise the Oracle Internet Directory, with high impact on confidentiality, integrity, and availability.
## Technical Details
- Affected component: OID LDAP Server in Oracle Internet Directory (Oracle Fusion Middleware).
- Attack characteristics (from NVD):
- Attack vector: AV:N (network)
- Attack complexity: AC:L
- Privileges required: PR:N (none)
- User interaction: UI:N (none)
- Scope: S:C (changed)
- Resulting outcome (from NVD): successful exploitation can lead to takeover of Oracle Internet Directory.
- CVSS 3.1: 10.0 with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
## Affected
- Oracle Fusion Middleware / Oracle Internet Directory (OID LDAP Server):
- 12.2.1.4.0
- 14.1.2.1.0
## Impact
- Compromise / takeover of Oracle Internet Directory.
- High impact across:
- Confidentiality (C:H)
- Integrity (I:H)
- Availability (A:H)
- Potential broader impact to additional products due to S:C (scope change).
## Mitigation
1. Patch immediately: apply the vendor’s fixed version(s) for Oracle Internet Directory / OID LDAP Server (exact fixed releases not provided in the available data).
2. Restrict network exposure: limit inbound access to the LDAP service so only trusted clients/networks can reach it.
3. Monitor for suspicious LDAP activity from unexpected sources (no detection indicators were provided in the available data).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H