PT-2026-3676 · Oracle · Oracle Siebel Crm

Published 2026-01-20 · Updated 2026-01-21 · CVE-2026-21926

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 25.2

Description An easily exploitable issue exists in the Server Infrastructure component of Oracle Siebel CRM. An unauthenticated attacker with network access via TLS can compromise Siebel CRM Deployment, potentially causing a denial-of-service condition through a hang or frequent crashes.

Recommendations Versions prior to 17.0 should be used. Versions 17.0 through 25.2 should be updated.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-01007

CVE-2026-21926

Affected Products

Oracle Siebel Crm

References · 6

• https://oracle.com/security-alerts/cpujan2026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21926 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21926 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01007 · Security Note
• https://cybersecurity-help.cz/vdb/SB20260120168 · Note
• https://twitter.com/CVEnew/status/2013783030725517462 · Twitter Post