CVE-2026-61339 is a vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3 through 26.6. It allows a low privileged attacker with logon access to the infrastructure to compromise the application, resulting in unauthorized access to critical data and unauthorized modification of some data. The vulnerability impacts confidentiality and integrity with a CVSS 3.1 score of 7.3. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability and strongly recommends applying security patches without delay. The vulnerability may also impact additional products due to scope change. No known exploits in the wild have been reported.

Successful exploitation of this vulnerability can result in unauthorized access to critical data within Siebel CRM Cloud Applications and unauthorized update, insertion, or deletion of some accessible data. The vulnerability affects confidentiality and integrity but does not impact availability. The scope of the vulnerability extends beyond Siebel CRM Cloud Applications, potentially affecting additional products. The CVSS 3.1 base score is 7.3 (high severity).

Oracle's advisory for the August 2026 Critical Security Patch Update includes this vulnerability and recommends that customers apply the provided security patches promptly. Customers should remain on actively supported versions and apply patches without delay to mitigate this vulnerability. Since the product is not a cloud service, remediation depends on applying vendor patches. Patch status is confirmed by the vendor advisory; no specific patch links were provided in the input, so customers should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for patch availability and installation instructions.