CVE-2026-62586

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 25.12 through 26.6

Description An issue exists in the Data Archival component of the Siebel CRM Administration product. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise Siebel CRM Administration, potentially leading to unauthorized access to critical data or complete access to all accessible data within the administration system. Although the flaw is located in Siebel CRM Administration, successful exploitation may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.