Live › vulnerability › CVE-2026-91434
Go to dashboardOracle Siebel CRM Deployment, in the Server Infrastructure component, has a flaw affecting supported versions 17.0 through 26.9. A user with high privileges and logon to the host where Siebel CRM Deployment runs can fully compromise the product.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Siebel CRM Deployment in the affected version range 17.0 through 26.9. Exposure requires an attacker who already has high privileges and logon on the infrastructure where the product executes, so the risk is mainly insider or post-compromise. Teams not running Siebel CRM can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91434")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.