CVE-2026-61053

HighCVSS 7.8

Published: 21/07/2026(UTC)Updated: 19/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

3th percentile - higher than 3% of all known CVEs

Summary

Vulnerability in Oracle Communications BRM - Elastic Charging Engine. A low-privileged attacker with local access can take over the system.

Risk Assessment

Risk of compromise of the billing system, potentially leading to tariff data manipulation and service disruption.

Recommendation

Apply the patch from Oracle for affected versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0.

Other vulnerabilities in Oracle Communications BRM - Elastic Charging Engine

CVE-2026-101763Critical
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product (component: Cloud native deployment) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via RMI can easily exploit it to take over Elastic Charging Engine.

Original NVD description (English source)

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and SDK). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in takeover of Oracle Communications BRM - Elastic Charging Engine. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS