A vulnerability exists in Oracle Business Intelligence Enterprise Edition (component: Machine Learning) affecting versions 8.2.0.0.0 and 26.01.0.0.0. This vulnerability allows a low privileged attacker with logon access to the infrastructure to compromise the product, potentially leading to full takeover. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities.