CVE-2026-21926
HighSummary
Vulnerability in Oracle Siebel CRM Deployment product (component: Server Infrastructure) affects versions 17.0-25.2. An unauthenticated attacker with network access via TLS can easily compromise the system, causing a hang or frequently repeatable crash (complete DoS).
Risk Assessment
The risk is that an unauthenticated attacker can completely disrupt the availability of Siebel CRM services, leading to downtime and loss of access to critical business operations.
Recommendation
Apply Oracle's patches for versions 17.0-25.2 immediately and restrict network access to Siebel CRM servers, especially via TLS, to trusted hosts only.
Other vulnerabilities in Siebel CRM Deployment
See all- CVE-2026-70856High
Vulnerability in Siebel CRM Deployment (component: Migration) versions 17.0-26.6. An unauthenticated attacker with network access via HTTP can compromise the system, but exploitation is difficult and requires user interaction. Successful attacks may result in full takeover of Siebel CRM Deployment.
- CVE-2026-60798High
Vulnerability in Siebel CRM Deployment (component: Migration). Affects versions 17.0-26.6. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to data and modify it. Attack may impact additional products (scope change).
- CVE-2026-60792High
Vulnerability in Siebel CRM Deployment (component: Server Infrastructure). Affects versions 17.0-26.6. Difficult to exploit, allows unauthenticated attacker via HTTP to gain unauthorized access to data and modify it.
- CVE-2026-60791High
Vulnerability in Siebel CRM Deployment (component: Application Interface). Affects versions 17.0-26.6. Easily exploitable, allows unauthenticated attacker with physical access to the network segment to gain unauthorized access to data and modify it.
- CVE-2026-60753High
Vulnerability in Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Affects versions 17.0-26.6. Easily exploitable, allows low privileged attacker with logon to the infrastructure to take over Siebel CRM Deployment.
Original NVD description (English source)
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-25.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).