CVE-2026-35243 | Oracle Application Development Framework 12.2.1.4.0/14.1.2.0.0 ADF Faces Local Privilege Escalation

April 22, 2026 Yanac

A vulnerability identified as critical has been detected in Oracle Application Development Framework 12.2.1.4.0/14.1.2.0.0. The impacted element is an unknown function of the component ADF Faces. This manipulation causes Local Privilege Escalation.

This vulnerability is tracked as CVE-2026-35243. The attack is restricted to local execution. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More