Web Access Vulnerability in Oracle Primavera P6 Project Portfolio Management

CVE-2026-91376

What is CVE-2026-91376?

A vulnerability exists in Oracle's Primavera P6 Enterprise Project Portfolio Management, specifically within the Web Access component. This flaw can be exploited by low privileged attackers with network access via HTTP, requiring human interaction to be successfully executed. Although the vulnerability specifically affects Primavera P6, the implications of such an attack can extend to significant impacts across related products. Successful exploitation can lead to unauthorized access to sensitive data, as well as the ability to update, insert, or delete data within Primavera P6, thereby compromising both the integrity and confidentiality of critical project information.

References