{"id":"CVE-2026-101790","kind":"vulnerability","aliases":["CVE-2026-101790"],"related":[],"title":"Oracle Communications BRM Elastic Charging Engine: local low-privilege read access flaw","description":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Communications BRM - Elastic Charging Engine accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","summary":"Oracle Communications BRM Elastic Charging Engine versions 15.0.0.0.0 through 15.2.0.0.0 contain a flaw in the Security component. A low-privileged user with logon to the host can read a subset of the product's data.","severity":"low","cvss":3.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["billing","on-prem","oracle","telecom","vendor"],"not_affected_if":["no-local-logon","other-versions"],"how_to_check":"- Check the installed BRM Elastic Charging Engine version against the affected list (15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0)\n- unknown for other checks: the sources do not say","fix":"- Apply the patch from Oracle's Critical Patch Update for Oracle Communications BRM Elastic Charging Engine\n- unknown for the exact patched version: the sources do not say","status":"open","published_at":"2026-10-20T22:18:34+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","triaged_at":"2026-10-25T04:46:05+00:00","updated_at":"2026-10-25T04:46:05+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T04:46:05Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the patch from Oracle's Critical Patch Update for Oracle Communications BRM Elastic Charging Engine\n- unknown for the exact patched version: the sources do not say","reach":"local","title":"Oracle Communications BRM Elastic Charging Engine: local low-privilege read access flaw","impact":"low","summary":"Oracle Communications BRM Elastic Charging Engine versions 15.0.0.0.0 through 15.2.0.0.0 contain a flaw in the Security component. A low-privileged user with logon to the host can read a subset of the product's data.","category":"vendor","nicknames":[],"who_cares":["oracle","telecom","billing","on-prem"],"confidence":0.6,"needs_auth":"yes","worst_case":"Low-privileged local user reads a subset of charging data","analyst_note":"","how_to_check":"- Check the installed BRM Elastic Charging Engine version against the affected list (15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0)\n- unknown for other checks: the sources do not say","needs_analyst":false,"not_affected_if":["other-versions","no-local-logon"],"who_is_affected":"Operators running Oracle Communications BRM Elastic Charging Engine in the affected 15.x releases. The attacker must already have logon on the infrastructure where the product runs, so exposure depends on who holds accounts on those hosts. Teams not running this Oracle product can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000632,"input_tokens":3539,"output_tokens":556,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-101790':16A,19A '-2026':15A,18A '/av':151C '15.0.0.0.0':34B,84C '15.0.1.0.0':85C '15.1.0.0.0':86C '15.2.0.0.0':36B,88C '3.1':141C,150C '3.3':144C 'access':12A,127C,138C 'affect':82C 'allow':92C 'attack':95C,118C 'base':142C 'bill':20B 'brm':3A,29B,68C,104C,113C,134C 'charg':5A,31B,70C,106C,115C,136C 'communic':2A,28B,67C,75C,103C,112C,133C 'compon':43B,76C 'compromis':110C 'confidenti':145C 'contain':37B 'cve':14A,17A 'cvss':140C,147C,149C 'data':62B,139C 'easili':89C 'elast':4A,30B,69C,105C,114C,135C 'engin':6A,32B,71C,107C,116C,137C 'execut':108C 'exploit':90C 'flaw':13A,39B 'host':53B 'impact':146C 'infrastructur':100C 'l/ac':152C 'l/i':157C 'l/pr':153C 'l/ui':154C 'local':7A 'logon':50B,97C 'low':9A,46B,93C 'low-privileg':8A,45B 'n':159C 'n/a':158C 'n/s':155C 'on-prem':21B 'oracl':1A,24B,27B,66C,74C,102C,111C,132C 'prem':23B 'privileg':10A,47B,94C 'product':60B,72C 'read':11A,55B,126C 'result':123C 'score':143C 'secur':42B,77C 'subset':57B,130C 'success':117C 'support':78C 'telecom':25B 'u/c':156C 'unauthor':125C 'user':48B 'vector':148C 'vendor':26B 'version':33B,79C 'vulner':63C,91C,121C","nicknames":[],"mitigations":[],"who_affected":"Operators running Oracle Communications BRM Elastic Charging Engine in the affected 15.x releases. The attacker must already have logon on the infrastructure where the product runs, so exposure depends on who holds accounts on those hosts. Teams not running this Oracle product can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:18:34+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101790","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101790","severity":null,"published_at":"2026-10-20T22:18:34+00:00","modified_at":"2026-10-22T18:17:23+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}