A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM, specifically in the Server Infrastructure component. This vulnerability affects supported versions from 17.0 through 26.7. It allows a high privileged attacker with network access via TCP to potentially take over the Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.