{"id":"CVE-2026-101763","published":"2026-10-20T22:18:31.607","lastModified":"2026-10-21T18:44:55.490","description":"Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment).  Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and  15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Communications BRM - Elastic Charging Engine.  Successful attacks of this vulnerability can result in takeover of Oracle Communications BRM - Elastic Charging Engine. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287","CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows unauthenticated attackers to completely compromise the Oracle Communications BRM - Elastic Charging Engine through RMI connections, potentially leading to full system takeover with high impacts on confidentiality, integrity, and availability.","exploitability":"The vulnerability is easily exploitable with no authentication required, allowing remote attackers to connect via RMI to compromise the affected system.","blast_radius":"If exploited, this vulnerability could lead to complete system takeover of the Elastic Charging Engine, potentially affecting billing operations and customer data across the entire communications infrastructure.","remediation":"Upgrade to Oracle Communications BRM - Elastic Charging Engine version 15.2.0.0.0 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","rmi","remote"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:24:04.792Z"}}