CVE WatchOct 20, 2026

CVE-2026-91634

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabil

CVSS

5.3

Medium

EPSS

—

KEV

—

Exploit Today

0-100

Published: Oct 20, 2026 · Last modified: Oct 20, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Official references

www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2026.html

Related CVEs

No related CVEs by CWE or product.