CVE-2026-83081

Received Received - Intake

Authentication Bypass in Oracle Banking Corporate Lending

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Banking Corporate Lending executes to compromise Oracle Banking Corporate Lending. While the vulnerability is in Oracle Banking Corporate Lending, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Corporate Lending accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.1 Base Score 8.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83081

EUVD

EUVD-2026-79409

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	banking_corporate_lending	From 14.5.0.0.0 (inc) to 14.9.0.0.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Banking Corporate Lending (part of Oracle Financial Services Applications). It allows an unauthenticated attacker with physical network access to exploit the system. The flaw enables unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all accessible data in the system.

Detection Guidance

Detection requires monitoring network traffic for unauthorized access attempts to Oracle Banking Corporate Lending components. Check logs for unusual data modification or deletion events in the application. Verify physical network segment access controls for the hardware running the software.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized data manipulation or access, potentially causing financial loss, data breaches, or regulatory violations. Attackers could alter or steal sensitive banking or financial data.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR (data protection) and HIPAA (healthcare data privacy) requirements. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Apply Oracle's official security patches immediately. Restrict physical and network access to the hardware running Oracle Banking Corporate Lending. Monitor critical data for unauthorized changes and implement strict access controls.

Hi! I’m here to help you understand CVE-2026-83081. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70