---
id: "CVE-2026-101527"
kind: "vulnerability"
aliases: ["CVE-2026-101527"]
title: "Oracle Enterprise Manager: install component flaw lets local users take over"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "on-prem", "oracle-enterprise-manager", "self-hosted"]
not_affected_if: ["no-shared-host-logons", "other-versions"]
published_at: "2026-10-20T22:18:02+00:00"
first_seen_at: "2026-10-23T21:57:22+00:00"
updated_at: "2026-10-25T03:10:01+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101527", "first_seen_at": "2026-10-23T21:57:22+00:00"}]
---

# Oracle Enterprise Manager: install component flaw lets local users take over

Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 contain a flaw in the Enterprise Manager Install component. A low-privileged user who can log on to the host running Enterprise Manager can take over the product.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm the installed Enterprise Manager version, for example by checking the Oracle Enterprise Manager console or the OMS home, and see whether it is 13.5 or 24.1.
- Check who has logon accounts on the hosts that run the Enterprise Manager management server.

## Fix

- Apply the Oracle Critical Patch Update that covers Enterprise Manager Base Platform 13.5 and 24.1, as listed in Oracle's advisory (unknown exact patch id in the sources).

## Timeline

- 2026-10-23T21:57:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101527

## From the sources

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install).  Supported versions that are affected are 13.5 and  24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Enterprise Manager Base Platform executes to compromise Oracle Enterprise Manager Base Platform.  Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_