CVE-2026-83153

CVE-2026-83153 is a high-severity vulnerability in the Server Infrastructure component of Oracle Siebel CRM Deployment, affecting all supported versions from 17.0 through 26.7. It is easily exploitable by a low-privileged (authenticated) attacker with network access via HTTPS, requiring no user interaction. A successful attack allows the attacker to fully compromise the Siebel CRM Deployment, with high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 8.8). Organizations running affected Siebel CRM versions exposed to authenticated users over network connections are at risk. There is no known public proof of concept and no evidence of in-the-wild exploitation, and the flaw is not on the CISA KEV list.

What to do: Apply the Oracle Critical Patch Update that remediates this issue and move to the first patched release above 26.7 as soon as it is available. Until patched, restrict HTTPS access to Siebel CRM Deployment so only trusted authenticated users and networks can reach the Server Infrastructure component, and audit low-privileged accounts for suspicious activity. Review server logs for anomalous privileged actions originating from standard user accounts.