CVE-2026-62512 is a critical vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions >=22.3 <=26.6. It allows a low privileged attacker with network access via HTTP to fully compromise the application, resulting in takeover. The vulnerability impacts confidentiality, integrity, and availability (CVSS 3.1 score 9.9, vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Oracle's August 2026 Critical Security Patch Update advisory includes fixes for this vulnerability among 943 patches. Customers are strongly advised to apply patches promptly to mitigate risk. No public exploit code or active exploitation has been reported.

Successful exploitation leads to complete compromise of Siebel CRM Cloud Applications, affecting confidentiality, integrity, and availability. The vulnerability allows attackers with low privileges and network access to take over the application. Additionally, the attack may impact other Oracle products due to scope change.

Oracle has released a Critical Security Patch Update including fixes for this vulnerability. Customers should apply the relevant patches from the August 2026 Critical Security Patch Update without delay. Oracle strongly recommends staying on actively supported versions and promptly applying security patches to prevent exploitation.