CVE-2026-35308 | Oracle Coherence 12.2.1.4.0/14.1.1.0.0/14.1.2.0.0/15.1.1.0.0 Centralized Third Party Jars Remote Code Execution

June 17, 2026 Yanac

A vulnerability labeled as very critical has been found in Oracle Coherence 12.2.1.4.0/14.1.1.0.0/14.1.2.0.0/15.1.1.0.0. Impacted is an unknown function of the component Centralized Third Party Jars. The manipulation results in Remote Code Execution.

This vulnerability is known as CVE-2026-35308. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More