{"id":"CVE-2026-91663","published":"2026-10-20T22:21:06.723","lastModified":"2026-10-23T17:18:32.390","description":"Vulnerability in Oracle Essbase (component: Security).   The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-284"],"vendors":["oracle"],"products":["essbase"],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Oracle Essbase contains a critical vulnerability in its Security component that allows low-privileged attackers with network access to fully compromise the system through T3 or IIOP protocols. This vulnerability affects version 21.8.3.0.0 and can lead to complete takeover of the affected database server.","exploitability":"The vulnerability is easily exploitable requiring only network access via T3 or IIOP protocols with low privilege credentials, making it highly attractive to attackers who can reach the system.","blast_radius":"Successful exploitation could result in full compromise of Oracle Essbase and potentially impact additional Oracle products due to the scope change, leading to significant data breaches and service disruption.","remediation":"Upgrade to Oracle Essbase version 21.8.3.0.0 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["database","rce","oracle"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:21:14.474Z"}}