CVE-2026-91638

Summary

Oracle Essbase security vulnerability allows low-privileged attackers with network access to fully compromise the system, affecting confidentiality, integrity, and availability. This critical flaw in version 21.8.3.0.0 enables unauthorized access that can extend beyond Essbase to other products.

Exploitability

Highly exploitable vulnerability requiring only low privilege and network access via HTTP, with no additional preconditions needed for successful exploitation.

Blast radius

Successful exploitation could lead to complete takeover of Oracle Essbase and potentially impact other connected systems due to the scope change in affected products.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle Essbase 21.8.3.0.0 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.