CVE-2026-83228 is a high-severity vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. It allows an unauthenticated attacker with network access to cause a hang or repeated crash of the Siebel CRM Deployment service, resulting in a complete denial of service. The vulnerability affects versions 17.0 through 26.7. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) confirms network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. Oracle has included a fix for this vulnerability in its September 2026 Critical Security Patch Update, which contains 673 security patches across multiple products.

Successful exploitation results in a complete denial of service (DoS) condition by causing the Siebel CRM Deployment service to hang or crash repeatedly. There is no impact on confidentiality or integrity according to the CVSS vector. The vulnerability can be exploited remotely without authentication, increasing the risk of disruption to affected systems.

Oracle has released a security patch for this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patch promptly to remediate this issue. Oracle recommends remaining on actively supported versions and applying security patches without delay to mitigate exploitation risks.