A vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affects supported versions 22.3 through 26.7. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within Siebel CRM Cloud Applications. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes. Customers are strongly advised to apply the available patches promptly to mitigate the risk.