CVE-2026-101495

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpuoct2026.html

Published

Oct 20, 2026

Last Modified

Oct 21, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10149Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-101490Vulnerability in the PeopleSoft Enterprise PeopleTools produ…6.1
• CVE-2026-101491Vulnerability in the PeopleSoft Enterprise PeopleTools produ…5
• CVE-2026-101492Vulnerability in the Siebel CRM Integration product of Oracl…4.7
• CVE-2026-101493Vulnerability in Oracle REST Data Services (component: Core)…5.4
• CVE-2026-101494Vulnerability in Oracle REST Data Services (component: Core)…7.7
• CVE-2026-101497Vulnerability in the Oracle Identity Manager product of Orac…4.3
• CVE-2026-101498Vulnerability in Oracle Trusted Answer Search (component: PL…8.1
• CVE-2026-101499Vulnerability in the Oracle WebCenter Sites product of Oracl…9.8
• CVE-2026-1015IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 …5.4
• CVE-2026-10150Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-101500Vulnerability in the Oracle Global Lifecycle Management OPat…6.5