CVE-2026-83192

CVE-2026-83192 is a difficult-to-exploit, unauthenticated vulnerability in the Open UI component of Oracle Siebel CRM End User, affecting supported versions 17.0 through 26.7. An attacker needs only network access via HTTP — no credentials, privileges, or user interaction — to trigger the flaw, though the high attack complexity means exploitation likely requires timing, race conditions, or special circumstances. A successful attack results in a complete takeover of the Siebel CRM End User application, with high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 8.1). Organizations running on-premises or hosted Siebel CRM deployments that expose the End User Open UI over the network are affected. There is no known public proof of concept, no evidence of in-the-wild exploitation, and the flaw is not on the CISA Known Exploited Vulnerabilities catalog.

What to do: Apply the Oracle Critical Patch Update (CPU) that addresses this vulnerability as soon as possible if you run Siebel CRM End User versions 17.0-26.7. Until patched, restrict network access to Open UI endpoints via IP allowlisting or VPN and ensure the application is not directly internet-facing. Review HTTP access logs for anomalous unauthenticated requests to the Open UI component and monitor for unexpected administrative changes or data access.