Live › vulnerability › CVE-2026-91597
Go to dashboardOracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 contain a Platform Security flaw. An unauthenticated attacker on the physical network segment of the hardware running it can take over the product, with impact reaching other products (CVSS 3.1 8.3).
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle Business Intelligence Enterprise Edition on versions 8.2.0.0.0 or 26.01.0.0.0. The attack needs an attacker on the same physical network segment as the host, which limits exposure from the internet. unknown whether other configurations change exposure.
No product ranges from the sources yet.
8.2.0.0.0 or 26.01.0.0.0Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91597")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.