What is the CVSS score of EUVD-2026-47335?

EUVD-2026-47335 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Oracle Communications BRM are affected by EUVD-2026-47335?

Oracle Communications Billing and Revenue Management (BRM) versions 15.0-15.2 contain a local privilege-escalation vulnerability (CVE-2026-61126, CVSS 7.8) that enables infrastructure operators with…

How to fix or mitigate EUVD-2026-47335?

Within 24 hours, inventory all deployed BRM instances in affected versions (15.0.0.0.0-15.2.0.0.0) and document system access patterns to identify exposure scope. Within 7 days, restrict system-level and administrative access to BRM infrastructure to documented essential personnel, enforce multi-factor authentication on all system accounts, deploy privileged access management (PAM) controls to monitor and audit all privileged activities, and segment BRM on isolated network infrastructure to limit lateral movement risk. Within 30 days, contact Oracle support to confirm patch availability timeline and initiate upgrade planning to secure versions; establish weekly monitoring of Oracle Critical Patch Updates and CISA KEV advisories to confirm when remediation is released.

Oracle Communications BRM EUVD-2026-47335

| CVE-2026-61126 HIGH

Improper Privilege Management (CWE-269)

2026-07-21 secalert_us@oracle.com

GHSA-vr53-qrqq-g8vw

Privilege Escalation Oracle Communications Billing And Revenue Management

7.8

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Requires an existing local logon with low privileges on the BRM host (AV:L, PR:L), no user interaction, and yields full takeover of the BRM system (C/I/A:H, scope unchanged).

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 00:40 vuln.today

CVE Published

Jul 21, 2026 - 22:18 nvd

HIGH 7.8

DescriptionCVE.org

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

AnalysisAI

Local privilege-escalation to full takeover in Oracle Communications Billing and Revenue Management (BRM) 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0 allows a low-privileged attacker with logon access to the underlying infrastructure to fully compromise the BRM Platform component, with high confidentiality, integrity, and availability impact. The flaw is rated CVSS 3.1 7.8 and was disclosed by Oracle in the July 2026 Critical Patch Update; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. Because BRM is a back-office telecom billing platform, exploitation requires an existing foothold on the host rather than remote unauthenticated access.

Technical ContextAI

Oracle Communications Billing and Revenue Management (BRM) is an enterprise revenue-management and billing platform used by telecommunications and service providers to rate, charge, and invoice for services; the affected 'Platform' component is the core middleware/runtime layer on which BRM services execute. Oracle did not assign a CWE (CWE: N/A) and does not publish root-cause detail in its Critical Patch Update advisories, so the specific weakness class (e.g., insecure file handling, privilege management, or injection) cannot be confirmed from the available data. The CVSS vector (AV:L/PR:L) indicates the defect is reached by a user who already has an OS-level login and low application/host privileges on the server where BRM runs, and that abusing it yields control of the BRM instance itself (S:U, so impact is confined to the vulnerable BRM system rather than crossing a security boundary to other systems).

RemediationAI

Apply the fixes delivered in the Oracle July 2026 Critical Patch Update (https://www.oracle.com/security-alerts/cpujul2026.html); the input does not include a specific patched build number, so Patch available per vendor advisory - consult the CPU matrix for the exact patch that covers your BRM 15.0.x or 15.1.x-15.2.x release and apply it during your next maintenance window. Because exploitation requires local logon to the BRM host, the most effective compensating control until patching is to tightly restrict and audit interactive OS-level access to BRM Platform servers - limit accounts that can log on to the host, enforce least privilege for the BRM runtime service account, and monitor for anomalous local activity; the trade-off is operational overhead and potential disruption to admin workflows, and these controls reduce but do not eliminate the risk. Do not expose BRM administrative or infrastructure access to untrusted networks or shared jump hosts.