EUVD-2026-79566
GHSA-wjhv-rchh-q79w
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local vector with low privileges and no user interaction matches a post-foothold escalation on the Deployment host, with full C/I/A impact.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
AnalysisAI
Local privilege escalation in Oracle Siebel CRM Deployment (Server Infrastructure component) lets any low-privileged user who can log on to the host running the Deployment service take full control of that deployment. All supported releases from 17.0 through 26.7 are affected, and successful exploitation yields complete loss of confidentiality, integrity and availability of the Siebel environment (CVSS 3.1 base 7.8, AV:L/AC:L/PR:L/UI:N). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an attacker to already hold a valid low-privileged logon (interactive or equivalent) to the specific host or infrastructure segment where the Oracle Siebel CRM Deployment server infrastructure executes, and to be able to run operations against that Deployment component locally; the CVSS vector is AV:L/PR:L/UI:N, so no network exposure and no user prompting are needed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The three main signals point in the same direction but differ in urgency: the vendor-assigned CVSS 3.1 score of 7.8 with AV:L/AC:L/PR:L/UI:N describes an easy, repeatable exploit that requires only a foothold account, exploitation status is unconfirmed (no CISA KEV entry, no publicly available exploit code in the supplied data), and EPSS was not provided in the input so probabilistic exploitation likelihood could not be cross-checked - this is a genuine data gap. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Oracle fix for your release by consulting https://www.oracle.com/security-alerts/cspusep2026.html and installing the build listed there for Siebel CRM Deployment 17.0-26.7; the supplied data does not state an exact patched version, so the fixed build must be read directly from the advisory before declaring closure. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today