Exploitable Vulnerability in Oracle Essbase Federated Partitions

CVE-2026-91656

What is CVE-2026-91656?

An easily exploitable vulnerability exists in Oracle Essbase's Federated Partitions component, affecting version 21.8.3.0.0. This security flaw allows low privileged attackers with network access through HTTP to compromise the instance, leading to potential unauthorized access to sensitive data. Successful exploitation can enable attackers to update, insert, or delete accessible data, as well as facilitate partial denial of service conditions. The implications of this vulnerability extend beyond Oracle Essbase, potentially affecting interconnected products.

References