A vulnerability exists in the Oracle Business Intelligence Enterprise Edition component of Oracle Analytics affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. This vulnerability allows a low-privileged attacker with logon access to the infrastructure to potentially take over the Oracle Business Intelligence Enterprise Edition. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.