CVE-2026-83219 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 to 26.7. It allows a low privileged attacker with logon access to the infrastructure to compromise the deployment, resulting in unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 7.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), indicating local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality and integrity impacts. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update advisory, which includes targeted patches for this and many other vulnerabilities.

Successful exploitation allows unauthorized creation, deletion, or modification of critical data within Siebel CRM Deployment, potentially compromising confidentiality and integrity of all accessible data. There is no impact on availability. The attacker requires low privileges and logon access to the infrastructure where Siebel CRM Deployment executes.

Oracle has released patches for this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply these security patches promptly to mitigate the risk. Remaining on actively supported versions and timely patching are critical, as Oracle reports ongoing attempts to exploit vulnerabilities for which patches exist. No alternative mitigations or workarounds are indicated in the advisory.