Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Oracle Billing and Revenue Management can be taken over

CVE-2026-91627 · published 15 days ago
Summary

Versions 15.0.0.0.0 through 15.2.0.0.0 of Oracle Communications Billing and Revenue Management are at risk. An attacker who can log into the server where the software runs could gain full control of the system. Apply the latest security patches from Oracle as soon as possible to prevent this.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle corporation oracle communications billing and revenue management 15.0.0.0.0
Original advisory text
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 1...
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-269Improper Privilege Management
Timeline
Published20 Oct 2026
Updated28 Oct 2026
First seen20 Oct 2026
Sources
CVE-2026-91627 · NVD
CVE-2026-91627 · MITRE
Track software like this
Free during beta