{"id":"CVE-2026-91446","kind":"vulnerability","aliases":["CVE-2026-91446"],"related":[],"title":"Oracle Siebel CRM Deployment: local high-privilege user can take over server","description":"Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).","summary":"Oracle Siebel CRM Deployment, in its Server Infrastructure component, has a flaw in supported versions 17.0 through 26.9. An attacker who already has high-privilege logon to the host running Siebel CRM Deployment can take over the product.","severity":"medium","cvss":6.7,"epss":0.00117,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["on-prem","oracle","siebel-crm","vendor"],"not_affected_if":["no-siebel-deployment","unsupported-version"],"how_to_check":"- Confirm whether Siebel CRM Deployment is installed and which version runs, with the version reported by the Siebel installation (unknown from sources for exact command)\n- Check whether the installed version falls within `17.0` through `26.9`","fix":"- Apply the vendor patch from Oracle's Siebel CRM security advisory for the affected release (patch identifier unknown from sources)\n- Restrict high-privilege logon to the Siebel host until patched","status":"open","published_at":"2026-10-20T22:20:48+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T03:46:34+00:00","updated_at":"2026-10-25T12:38:52+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T03:46:34Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the vendor patch from Oracle's Siebel CRM security advisory for the affected release (patch identifier unknown from sources)\n- Restrict high-privilege logon to the Siebel host until patched","reach":"local","title":"Oracle Siebel CRM Deployment: local high-privilege user can take over server","impact":"high","summary":"Oracle Siebel CRM Deployment, in its Server Infrastructure component, has a flaw in supported versions 17.0 through 26.9. An attacker who already has high-privilege logon to the host running Siebel CRM Deployment can take over the product.","category":"vendor","nicknames":[],"who_cares":["siebel-crm","oracle","on-prem"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker with high privileges takes over the Siebel CRM Deployment","analyst_note":"Find Oracle's Siebel CRM Critical Patch Update advisory for the patched release and exact affected versions; sources give only the NVD entry.","how_to_check":"- Confirm whether Siebel CRM Deployment is installed and which version runs, with the version reported by the Siebel installation (unknown from sources for exact command)\n- Check whether the installed version falls within `17.0` through `26.9`","needs_analyst":true,"not_affected_if":["unsupported-version","no-siebel-deployment"],"who_is_affected":"Organizations running Oracle Siebel CRM Deployment in the affected version range, on the servers where it executes. Exposure depends on someone with high privileges and local logon to the infrastructure, so the risk sits with administrators and accounts that already hold elevated access.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000651,"input_tokens":3475,"output_tokens":607,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-26.9':88C '-91446':16A,19A '/av':138C '17.0':43B,87C '26.9':45B '3.1':125C,137C '6.7':128C 'affect':85C 'allow':92C 'alreadi':49B 'attack':47B,95C,112C 'avail':132C 'base':126C 'compon':36B,78C 'compromis':107C 'confidenti':129C 'crm':3A,26B,30B,60B,71C,77C,103C,109C,122C 'cve':14A,17A 'cvss':124C,134C,136C 'deploy':4A,31B,61B,72C,104C,110C,123C 'easili':89C 'execut':105C 'exploit':90C 'flaw':39B 'h':146C 'h/a':145C 'h/i':144C 'h/ui':141C 'high':7A,52B,93C 'high-privileg':6A,51B 'host':57B 'impact':133C 'infrastructur':35B,80C,100C 'integr':130C 'l/ac':139C 'l/pr':140C 'local':5A 'logon':54B,97C 'n/s':142C 'on-prem':20B 'oracl':1A,23B,28B,75C 'prem':22B 'privileg':8A,53B,94C 'product':66B,73C 'result':117C 'run':58B 'score':127C 'server':13A,34B,79C 'siebel':2A,25B,29B,59B,70C,76C,102C,108C,121C 'siebel-crm':24B 'success':111C 'support':41B,81C 'take':11A,63B 'takeov':119C 'u/c':143C 'user':9A 'vector':135C 'vendor':27B 'version':42B,82C 'vulner':67C,91C,115C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle Siebel CRM Deployment in the affected version range, on the servers where it executes. Exposure depends on someone with high privileges and local logon to the infrastructure, so the risk sits with administrators and accounts that already hold elevated access.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:20:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91446","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91446","severity":null,"published_at":"2026-10-20T22:20:48+00:00","modified_at":"2026-10-23T21:17:28+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:00+00:00","note":null},{"source":"epss","external_id":"CVE-2026-91446","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-91446","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:52+00:00","fetched_at":"2026-10-25T12:38:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}