CVE-2026-91665

Summary

Oracle Essbase security vulnerability allows unauthenticated attackers to fully compromise the system with high impact on confidentiality, integrity, and availability. This critical flaw affects version 21.8.3.0.0 and can be exploited over TCP network access.

Exploitability

The vulnerability is easily exploitable with no authentication required, allowing attackers to gain full control of Oracle Essbase from any network location with TCP connectivity.

Blast radius

Successful exploitation could lead to complete takeover of Oracle Essbase systems, potentially affecting financial reporting, data analysis, and business intelligence applications that depend on this platform.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle Essbase version 21.8.3.0.0 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.