CVE-2026-91627
HighCVSS 7.8Summary
Vulnerability in Oracle Communications Billing and Revenue Management (component: Platform) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable attack by a low privileged user with local logon to the infrastructure can lead to takeover of the system.
Risk Assessment
An attacker with local access could take over Billing and Revenue Management, threatening confidentiality, integrity and availability. CVSS 7.8 indicates high risk.
Recommendation
Apply Oracle's fix for Oracle Communications Billing and Revenue Management and restrict local access to the infrastructure.
Other vulnerabilities in Oracle Communications Billing and Revenue Management
See all- CVE-2026-101765Critical
Vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.
- CVE-2026-61126High
Vulnerability in Oracle Communications Billing and Revenue Management (component: Platform) versions 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0. A low-privileged attacker with local access can fully compromise the system.
- CVE-2026-61091High
In Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure to compromise the system. Successful attacks can result in takeover of the system.
Original NVD description (English source)
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS