Live › vulnerability › CVE-2026-101791
Go to dashboardOracle Communications BRM Elastic Charging Engine 15.2.0.0.0 has a flaw in its Security component that lets a low-privileged user on the network, reaching the service over TLS, create, change, delete or read critical data. The CVSS 3.1 score is 8.1 with high confidentiality and integrity impact and no availability impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Deployments of Oracle Communications BRM Elastic Charging Engine version 15.2.0.0.0 are affected, reachable over the network with any low-privileged account. Teams not running this Oracle product can skip it. unknown for whether default configurations or specific features are required.
No product ranges from the sources yet.
15.2.0.0.0Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). The supported version that is affected is 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Communications BRM - Elastic Charging Engine accessible data as well as unauthorized access to critical data or complete access to all Oracle Communications BRM - Elastic Charging Engine accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101791")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.