Live › vulnerability › CVE-2026-91446
Go to dashboardOracle Siebel CRM Deployment, in its Server Infrastructure component, has a flaw in supported versions 17.0 through 26.9. An attacker who already has high-privilege logon to the host running Siebel CRM Deployment can take over the product.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle Siebel CRM Deployment in the affected version range, on the servers where it executes. Exposure depends on someone with high privileges and local logon to the infrastructure, so the risk sits with administrators and accounts that already hold elevated access.
No product ranges from the sources yet.
17.0 through 26.9Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91446")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.