---
id: "CVE-2026-101468"
kind: "vulnerability"
aliases: ["CVE-2026-101468"]
title: "Oracle Siebel CRM Cloud Gateway flaw exposes CRM data to unauthenticated network attackers"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["cloud-gateway", "enterprise-crm", "oracle", "siebel-crm", "vendor"]
not_affected_if: ["unknown"]
published_at: "2026-10-20T22:17:55+00:00"
first_seen_at: "2026-10-23T21:57:21+00:00"
updated_at: "2026-10-25T03:20:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101468", "first_seen_at": "2026-10-23T21:57:21+00:00"}]
---

# Oracle Siebel CRM Cloud Gateway flaw exposes CRM data to unauthenticated network attackers

Oracle Siebel CRM Deployment's Cloud Gateway component has a flaw that can be triggered over HTTP by an unauthenticated attacker with network access. A successful attack gives unauthorized read access to critical CRM data.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm whether Siebel CRM Deployment is in use and which release is running, affected versions are listed as 17.0 through 26.9
- Check whether the Cloud Gateway component is deployed and reachable over HTTP from untrusted networks
- Check the Oracle Critical Patch Update advisory for the installed Siebel release, as the sources do not give a fixed-version list

## Fix

- Apply the Oracle Siebel CRM Deployment patch for the affected Cloud Gateway component (fixed version: unknown from the sources)
- Restrict network access to the Cloud Gateway endpoint until patched

## Timeline

- 2026-10-23T21:57:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101468

## From the sources

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_