{"id":"CVE-2026-101759","kind":"vulnerability","aliases":["CVE-2026-101759"],"related":[],"title":"Oracle Billing and Revenue Management: unauthenticated HTTP flaw exposes critical data","description":"Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","summary":"Oracle Communications Billing and Revenue Management (BRM Server) versions 15.0 through 15.2 contain a flaw that an unauthenticated attacker can reach over HTTP from the network. A successful attack gives read access to critical data stored in the BRM system.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["billing","brm-server","oracle","telecom","vendor"],"not_affected_if":["no-network-http-exposure","unaffected-version"],"how_to_check":"- Check the installed BRM Server version against 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0\n- Confirm whether BRM HTTP endpoints are reachable from untrusted networks (unknown from sources)","fix":"- Apply the Oracle Critical Patch Update that covers the BRM Server component (patch identifier unknown from sources)\n- Restrict network access to BRM HTTP interfaces until patched","status":"open","published_at":"2026-10-20T22:18:31+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","triaged_at":"2026-10-25T03:19:06+00:00","updated_at":"2026-10-25T03:19:06+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T03:19:06Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Critical Patch Update that covers the BRM Server component (patch identifier unknown from sources)\n- Restrict network access to BRM HTTP interfaces until patched","reach":"internet","title":"Oracle Billing and Revenue Management: unauthenticated HTTP flaw exposes critical data","impact":"high","summary":"Oracle Communications Billing and Revenue Management (BRM Server) versions 15.0 through 15.2 contain a flaw that an unauthenticated attacker can reach over HTTP from the network. A successful attack gives read access to critical data stored in the BRM system.","category":"vendor","nicknames":[],"who_cares":["oracle","billing","telecom","brm-server"],"confidence":0.6,"needs_auth":"no","worst_case":"Unauthenticated attacker reads all BRM-accessible critical billing data","analyst_note":"Find the Oracle Critical Patch Update advisory for BRM 15.x to confirm the patched version and any configuration needed; check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-101759.","how_to_check":"- Check the installed BRM Server version against 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0\n- Confirm whether BRM HTTP endpoints are reachable from untrusted networks (unknown from sources)","needs_analyst":true,"not_affected_if":["unaffected-version","no-network-http-exposure"],"who_is_affected":"Operators running Oracle Communications Billing and Revenue Management BRM Server in the affected 15.x versions with HTTP reachable from the network. Systems on unaffected versions or with HTTP access limited to trusted internal hosts face lower exposure. The sources do not say which specific deployment configurations are required.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00069,"input_tokens":3506,"output_tokens":678,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101759':14A,17A '-2026':13A,16A '/av':148C '15.0':34B '15.0.0.0.0':87C '15.0.1.0.0':88C '15.1.0.0.0':89C '15.2':36B '15.2.0.0.0':91C '3.1':138C,147C '7.5':141C 'access':56B,100C,120C,126C,135C 'affect':85C 'allow':95C 'attack':43B,53B,97C,112C 'base':139C 'bill':2A,18B,27B,70C,107C,131C 'brm':20B,31B,63B,79C 'brm-server':19B 'communic':26B,69C,77C,106C,130C 'complet':125C 'compon':78C 'compromis':104C 'confidenti':142C 'contain':37B 'critic':10A,58B,122C 'cve':12A,15A 'cvss':137C,144C,146C 'data':11A,59B,123C,136C 'easili':92C 'exploit':93C 'expos':9A 'flaw':8A,39B 'give':54B 'h/i':154C 'http':7A,47B,102C 'impact':143C 'l/pr':150C 'manag':5A,30B,73C,110C,134C 'n':156C 'n/a':155C 'n/ac':149C 'n/s':152C 'n/ui':151C 'network':50B,99C 'oracl':1A,22B,25B,68C,76C,105C,129C 'product':74C 'reach':45B 'read':55B 'result':117C 'revenu':4A,29B,72C,109C,133C 'score':140C 'server':21B,32B,80C 'store':60B 'success':52B,111C 'support':81C 'system':64B 'telecom':23B 'u/c':153C 'unauthent':6A,42B,96C 'unauthor':119C 'vector':145C 'vendor':24B 'version':33B,82C 'via':101C 'vulner':65C,94C,115C","nicknames":[],"mitigations":[],"who_affected":"Operators running Oracle Communications Billing and Revenue Management BRM Server in the affected 15.x versions with HTTP reachable from the network. Systems on unaffected versions or with HTTP access limited to trusted internal hosts face lower exposure. The sources do not say which specific deployment configurations are required.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:18:31+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101759","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101759","severity":null,"published_at":"2026-10-20T22:18:31+00:00","modified_at":"2026-10-22T16:17:15+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}