A vulnerability in Oracle Business Intelligence Enterprise Edition (Oracle Analytics) platform security allows a low privileged attacker with network access via HTTP to potentially take over the product. The affected versions include 8.2.0.0.0 and 26.01.0.0.0. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities. Oracle strongly recommends applying available patches promptly to mitigate this risk.