CVE-2026-83216 is a vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. It affects supported versions from 17.0 up to 26.7. The flaw is easily exploitable by an attacker with low privileges and logon access to the infrastructure where Siebel CRM Deployment runs. Successful exploitation can lead to complete compromise of the Siebel CRM Deployment environment. The CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

An attacker with low privileges and logon access to the infrastructure can exploit this vulnerability to fully compromise the Siebel CRM Deployment product. This results in complete takeover, affecting confidentiality, integrity, and availability of the system.

Oracle has released security patches addressing this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the relevant patches without delay to mitigate this vulnerability. Staying on actively supported versions and promptly applying Oracle patches is critical to prevent exploitation.