A vulnerability exists in the Siebel Apps - Marketing component of Oracle Siebel CRM, affecting versions 17.0 through 26.7. This vulnerability allows a high-privileged attacker with network access via HTTP to compromise the affected component, potentially leading to full takeover. The CVSS 3.1 base score is 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 that addresses this and many other vulnerabilities. Customers are strongly advised to apply the provided patches promptly to mitigate the risk.