Oracle Comm Billing & Rev Mgmt v15.0-15.2 Platform Privilege Escalation
CVE-2026-83406 Published on October 20, 2026
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Vulnerability Analysis
CVE-2026-83406 is exploitable with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-83406 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2026-83406
stack.watch emails you whenever new vulnerabilities are published in Oracle or Oracle Communications Billing Revenue Management. Just hit a watch button to start following.
Affected Versions
Oracle Corporation Oracle Communications Billing and Revenue Management:- Version 15.0.0.0.0 is affected.
- Version 15.0.1.0.0 is affected.
- Version 15.1.0.0.0 is affected.
- Version 15.2.0.0.0 is affected.