A vulnerability exists in the Oracle Siebel CRM Deployment product, specifically in the Cloud Gateway component, affecting versions 17.0 through 26.7. This vulnerability allows a low-privileged attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 6.8, indicating medium severity with high confidentiality and integrity impacts but no availability impact. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected products.