CVE-2026-83225 is a denial-of-service vulnerability in the Oracle Siebel CRM Deployment product's Server Infrastructure component. It affects supported versions from 17.0 up to 26.7. An unauthenticated attacker with network access via TCP can exploit this vulnerability to cause the service to hang or crash repeatedly, resulting in a complete denial of service. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability only.

Successful exploitation results in denial of service by causing the Siebel CRM Deployment service to hang or crash repeatedly. There is no impact on confidentiality or integrity. The vulnerability allows unauthenticated remote attackers to disrupt service availability.

Oracle has released security patches addressing this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches without delay to remediate this issue. The vendor advisory emphasizes remaining on actively supported versions and promptly applying Oracle patches. Patch status is confirmed as available via Oracle's Critical Security Patch Update.