A vulnerability exists in Oracle Business Intelligence Enterprise Edition (component: BI Search) affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. This vulnerability allows a low privileged attacker with logon access to the infrastructure to potentially take over the Oracle Business Intelligence Enterprise Edition. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.