Live › vulnerability › CVE-2026-101446
Go to dashboardOracle Siebel CRM Cloud Applications (component Siebel Cloud Manager), versions 17.0 through 26.9, has a flaw that lets a low-privilege attacker with HTTP network access take over the application and affect other products (scope change). CVSS 3.1 9.9, fixed in Oracle's October 2026 Critical Patch Update. No known exploitation or public PoC.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Siebel CRM Cloud Applications | vendor | >= 17.0, <= 26.9 | see Oracle CPU Oct 2026 (26.10 per Armis, unconfirmed) |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101446")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.