CVE-2026-91644

Summary

Oracle Essbase contains a critical unauthenticated vulnerability in its security component that allows attackers to gain unauthorized access to sensitive data and modify data within the system. This vulnerability affects version 21.8.3.0.0 and can lead to complete compromise of Oracle Essbase data.

Exploitability

The vulnerability is easily exploitable with no authentication required, allowing unauthenticated network access via HTTP to compromise the system.

Blast radius

Successful exploitation could result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data, potentially impacting additional products due to scope change.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle Essbase version 21.8.3.0.0 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.