CVE-2026-83220

CVE-2026-83220 is a high-severity (CVSS 8.1) vulnerability in the Event Publish and Subscribe component of Oracle Siebel CRM Integration, affecting Release Updates 23.6 through 26.7. It is easily exploitable by an unauthenticated attacker who has access to the physical communication segment (same network/adjacent network) attached to the hardware where Siebel CRM Integration executes — no privileges or user interaction are required. A successful attack compromises the integration component, giving the attacker unauthorized ability to create, delete, or modify critical data (or all Siebel CRM Integration accessible data) as well as unauthorized read access to critical or all accessible data; availability is not impacted. Organizations running on-premises Siebel CRM Integration deployments within the affected version range are exposed, primarily from attackers already present on internal or data-center network segments. No public proof-of-concept is known, the flaw is not on the CISA KEV list, and no in-the-wild exploitation has been reported.

What to do: Apply Oracle's Critical Patch Update and upgrade Siebel CRM Integration to a Release Update newer than 26.7 containing the fix for this CVE. In the meantime, restrict network access to the Siebel integration/Event Publish and Subscribe endpoints to trusted hosts only using firewall rules, VLAN segmentation, or ACLs, since exploitation requires adjacency on the communication segment. Review audit and integration logs for unexplained data creation, deletion, or modification activity originating from unrecognized sources.