CVE-2026-73946 – Oracle Access Manager

CVSS 9.1 CRITICAL [2] Critical – Same Day Deployment

“When the gatekeeper has ten critical holes, every door behind it is open.”

This Oracle Access Manager update fixes ten Critical vulnerabilities in the platform that controls single sign-on and access to enterprise applications. Every flaw in this batch is rated Critical. A weakness in the access layer puts every application behind it at risk, so this update needs same-day attention.

CVE-2026-71133 has a CVSS score of 10.0, Critical severity. CVE-2026-71163 and CVE-2026-73945 each have a CVSS score of 9.9, Critical severity. CVE-2026-73940, CVE-2026-73947, and CVE-2026-73950 each have a CVSS score of 9.8, Critical severity. CVE-2026-73962 has a CVSS score of 9.6, Critical severity. CVE-2026-73944, CVE-2026-73946, and CVE-2026-83001 each have a CVSS score of 9.1, Critical severity.

Key Details

Affected Product: Oracle Access Manager
Attack Vector: Network
Attack Complexity: Low
Privileges Required: High
User Interaction: None
CWE Classification: CWE-284

Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.