Vulnerability in Oracle Planning and Budgeting Cloud Service by Oracle
CVE-2026-21922
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 20 January 2026
What is CVE-2026-21922?
The vulnerability identified in Oracle Planning and Budgeting Cloud Service, specifically within the EPM Agent component, allows a high-privileged attacker with access to the infrastructure to potentially compromise the service. This flaw enables unauthorized actions such as the creation, deletion, or modification of critical data within the system. Notably, successful exploitation requires human interaction by someone other than the attacker. It is crucial to update the EPM Agent to mitigate this risk and protect sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Oracle Planning and Budgeting Cloud Service 25.04.07
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved