CVE-2026-83288 is a vulnerability in the Oracle Business Intelligence Enterprise Edition product, specifically in the BI Search component. It affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. The flaw allows a low privileged attacker who has logon access to the infrastructure where the product runs to compromise the system, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 7.8 with high impact on confidentiality, integrity, and availability. Oracle's September 2026 Critical Security Patch Update includes patches for this vulnerability among 673 other fixes. Oracle strongly recommends applying these patches promptly to mitigate exploitation risks.

Successful exploitation of this vulnerability can result in complete compromise of Oracle Business Intelligence Enterprise Edition, affecting confidentiality, integrity, and availability of the system. The attacker requires low privileges and logon access to the underlying infrastructure to exploit this vulnerability. There are no known exploits in the wild at the time of publication.

Oracle has released patches for this vulnerability as part of the September 2026 Critical Security Patch Update. Customers should apply the relevant security patches without delay to remediate this vulnerability. Oracle strongly recommends remaining on actively supported versions and promptly applying all security updates. No alternative mitigations or workarounds are specified in the advisory.