CVE-2026-83079 is a vulnerability in Oracle Siebel CRM Cloud Applications, specifically in the Siebel Cloud Manager component, affecting versions 22.3 through 26.7. The flaw allows a high privileged attacker with logon access to the underlying infrastructure to compromise the application, resulting in unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 score of 7.9 with attack vector local, low attack complexity, high privileges required, no user interaction, scope changed, and high confidentiality and integrity impacts. Oracle’s September 2026 Critical Security Patch Update includes patches addressing this vulnerability among 673 others across multiple products.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Siebel CRM Cloud Applications, as well as unauthorized access to all accessible data. The vulnerability impacts confidentiality and integrity but does not affect availability. The scope of impact extends beyond Siebel CRM Cloud Applications to additional products. The CVSS score of 7.9 reflects a high severity risk requiring attention.

Oracle has released patches for this vulnerability as part of the September 2026 Critical Security Patch Update. Users should apply the relevant security patches promptly to mitigate the risk. Oracle strongly recommends remaining on actively-supported versions and applying security patches without delay. No indication of temporary or alternative mitigations is provided; patching is the primary remediation.