A vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security) allows a high privileged attacker with network access via HTTP to compromise the product. The affected versions include 8.2.0.0.0 and 26.01.0.0.0. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.