CVE-2026-91658

Summary

Oracle Essbase 21.8.3.0.0 contains a critical security vulnerability that allows low-privileged attackers with network access to fully compromise the system, affecting confidentiality, integrity, and availability. This flaw represents a significant risk as it can lead to complete system takeover.

Exploitability

The vulnerability is easily exploitable requiring only low privileged network access via HTTP, with minimal preconditions for successful exploitation.

Blast radius

Successful exploitation could result in full compromise of Oracle Essbase and potentially impact additional related products due to the scope change, making this a high-impact attack vector.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle Essbase 21.8.3.0.1 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.