Live › vulnerability › CVE-2026-91439
Go to dashboardOracle Siebel CRM Deployment, Server Infrastructure component, has a flaw that lets an attacker with logon to the host where it runs compromise the deployment. A successful attack gives unauthorized access to critical data held by Siebel CRM Deployment.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle Siebel CRM Deployment in the 17.0 to 26.9 supported version range, where users with logon to the server infrastructure can reach the product. Deployments outside that range, or where no one can log on to the host, are less exposed. unknown for finer detail.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91439")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.