A vulnerability exists in Oracle Business Intelligence Enterprise Edition (component: Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. The flaw allows an unauthenticated attacker with network access via HTTP to potentially compromise the product, resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected versions. Oracle strongly recommends applying these patches promptly to mitigate the risk.