CVE-2026-82992

CVE-2026-82992 is a local privilege escalation flaw in the Installation component of Oracle Siebel CRM Deployment, affecting supported versions 17.0 through 26.7. It is easily exploitable by a low-privileged attacker who already has logon access to the server or infrastructure where Siebel CRM Deployment executes, requiring no user interaction. A successful attack allows the attacker to fully compromise the Siebel CRM Deployment, with high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 7.8). Organizations running Siebel CRM Deployment on shared or multi-tenant hosts where untrusted or low-privilege accounts exist are most at risk, since the flaw requires local access rather than network reachability. There is no evidence of exploitation in the wild, the CVE is not on the CISA KEV list, and no public proof-of-concept is known.

What to do: Apply the Oracle Critical Patch Update that addresses CVE-2026-82992 to all Siebel CRM Deployment installations running versions 17.0-26.7. Restrict interactive and service-account logon on Siebel servers to trusted administrators only, and audit local OS accounts and privilege escalation activity on those hosts. Since exploitation requires local access, prioritize hosts where Siebel shares infrastructure with less-trusted workloads or users.