PT-2026-3676 · Oracle · Oracle Siebel Crm

CVE-2026-21926 · Publicado 2026-01-20 · Atualizado 2026-01-21

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 25.2

Description An easily exploitable issue exists in the Server Infrastructure component of Oracle Siebel CRM. An unauthenticated attacker with network access via TLS can compromise Siebel CRM Deployment, potentially causing a denial-of-service condition through a hang or frequent crashes.

Recommendations Versions prior to 17.0 should be used. Versions 17.0 through 25.2 should be updated.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2026-01007

CVE-2026-21926

Produtos afetados

Oracle Siebel Crm

Referências · 6

• https://cybersecurity-help.cz/vdb/SB20260120168 · Nota
• https://twitter.com/CVEnew/status/2013783030725517462 · Publicação no Twitter
• https://oracle.com/security-alerts/cpujan2026.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21926 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-21926 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-01007 · Nota de Segurança