CVE-2026-21926

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)

High · published January 20, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

🚨 An unauthenticated attacker can exploit this vulnerability to crash your Siebel CRM Deployment system, just by having network access! 🔥 Think of it like a party with a bouncer at the door, but the bouncer is taking a coffee break — anyone can waltz in and start pulling the plug on the music streaming, causing chaos for everyone inside. If an attacker targets this vulnerability, they could induce a denial of service (DoS) by repeatedly crashing the Siebel CRM Deployment system. This means users will be locked out and unable to access critical customer data, potentially leading to significant business disruption.

Put simply

Think of it like a party with a bouncer at the door, but the bouncer is taking a coffee break — anyone can waltz in and start pulling the plug on the music streaming, causing chaos for everyone inside. This vulnerability exists due to insufficient protections in the Siebel CRM Deployment's server infrastructure, allowing an attacker with network access via TLS to cause a complete service crash.

What to do

If an attacker targets this vulnerability, they could induce a denial of service (DoS) by repeatedly crashing the Siebel CRM Deployment system. This means users will be locked out and unable to access critical customer data, potentially leading to significant business disruption. Immediately upgrade to the latest version of Siebel CRM Deployment (version 25.3 or later) to eliminate this vulnerability. Ensure that you have proper network security measures in place to restrict unauthorized access. Regularly review your system configurations to maintain a secure environment. You've got this! Take action now, and you'll have your Siebel CRM Deployment secure in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.1th percentile
Published
2026-01-20T21:56Z
EPSS history
Timeline
  • 20 JAN 21:56Z
    Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)
    cvelistv5