CVE-2026-83491 is a vulnerability in Oracle iRecruitment within Oracle E-Business Suite versions 12.2.3 to 12.2.15. It allows an unauthenticated attacker with physical network segment access to compromise Oracle iRecruitment, potentially leading to unauthorized creation, deletion, or modification of critical data or full data access. The vulnerability has a CVSS 3.1 score of 6.8 with attack vector requiring adjacent network access and high attack complexity. Oracle has addressed this vulnerability in the September 2026 Critical Security Patch Update, which includes targeted security fixes for this and many other vulnerabilities across Oracle products.

Exploitation of this vulnerability can result in unauthorized creation, deletion, or modification of critical data within Oracle iRecruitment or unauthorized access to all data accessible by the product. The confidentiality and integrity of the data are highly impacted. However, exploitation requires physical access to the communication segment, making it difficult to exploit. There is no impact on availability.

Oracle has released patches for this vulnerability as part of the September 2026 Critical Security Patch Update. Customers using Oracle iRecruitment versions 12.2.3 through 12.2.15 are strongly advised to apply the relevant patches promptly to remediate this vulnerability. Oracle recommends remaining on actively supported versions and applying security patches without delay. No alternative mitigations or workarounds are specified in the advisory.