CVE-2026-91241

KRITISCH 9.1CVE-2026-91241 · Published 20/10/2026 · updated 28/10/2026

Kurz gesagt

CVE-2026-91241 ist eine Schwachstelle (KRITISCH (CVSS 9.1)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.32%, höher als bei 24.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

References

oracle.com/security-alerts/cpuoct2026.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free