CVE-2026-83181 is a vulnerability in the Workspaces component of Oracle Siebel CRM Development product affecting versions 17.0 to 26.7. The flaw allows an unauthenticated network attacker to exploit the system via HTTP, resulting in unauthorized access to critical or all accessible data and the ability to cause a partial denial of service. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L, reflecting high confidentiality impact and low availability impact without requiring privileges or user interaction.

Successful exploitation can lead to unauthorized access to critical or all accessible data within Siebel CRM Development and partial denial of service conditions. This compromises confidentiality and availability of the affected system. There is no indication of integrity impact. The vulnerability is exploitable remotely without authentication.

Oracle has released security patches addressing this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the relevant patches promptly to affected versions of Siebel CRM Development. Oracle recommends remaining on actively-supported versions and applying security patches without delay to prevent exploitation. No alternative mitigations or workarounds are specified.