CVE-2026-83075 is a vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM, specifically in the Siebel Cloud Manager component. It affects supported versions from 22.3 up to 26.7. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the application, resulting in unauthorized access to critical or all accessible data. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and high confidentiality impact without integrity or availability impact. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes 673 security patches across multiple products including Siebel Applications.

Successful exploitation of this vulnerability can lead to unauthorized access to critical or all accessible data within Siebel CRM Cloud Applications. This compromises confidentiality but does not affect integrity or availability. The vulnerability is exploitable remotely without authentication, increasing the risk of data exposure.

Oracle has released a security patch for this vulnerability as part of the September 2026 Critical Security Patch Update. Customers should apply the relevant patches for Siebel CRM Cloud Applications versions 22.3 through 26.7 without delay. Oracle strongly recommends staying on actively supported versions and promptly applying security patches to prevent exploitation. No alternative mitigations or 'no action required' statements are provided by Oracle, so patching is the primary remediation.