Live › vulnerability › CVE-2026-91436
Go to dashboardOracle Siebel CRM Deployment, in the Server Infrastructure component, has a flaw that lets a highly privileged local user with logon to the host partly read, change, or delete Siebel data and cause a partial denial of service. The attack is hard to carry out and needs high privileges, so the impact is limited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Siebel CRM Deployment in the affected release range, in particular where users with logon to the server host have high privileges. Systems that do not run Siebel CRM Deployment can skip it.
No product ranges from the sources yet.
17.0 through 26.9 is installed; the sources do not give a command for this.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Deployment accessible data as well as unauthorized read access to a subset of Siebel CRM Deployment accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 3.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L).
This page as .md · .json · in your agent: get_signal("CVE-2026-91436")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.