A vulnerability exists in Oracle Business Intelligence Enterprise Edition (version 26.1.0.0.0) within the Platform Security component. This vulnerability allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The CVSS 3.1 base score is 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected versions.