Live › vulnerability › CVE-2026-91444
Go to dashboardOracle Siebel CRM Deployment has a flaw in its Server Infrastructure component, affecting supported versions 17.0 through 26.9. An attacker who already has high-privilege logon to the host running Siebel CRM Deployment can take over the product.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organisations running Oracle Siebel CRM Deployment in the affected version range on servers where privileged users can log on. The attack needs local access with high privileges, so exposure is mainly a concern for shared or weakly controlled admin hosts. Teams not running Siebel CRM can skip it.
No product ranges from the sources yet.
17.0 through 26.9Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91444")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.