Is CVE-2026-46925 actively exploited?

No active exploitation of CVE-2026-46925 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-46925 be exploited remotely?

Partially. CVE-2026-46925 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-46925?

CVE-2026-46925 has a CVSS score of 8.3 (HIGH).

HOME VULNERABILITIESCVE-2026-46925

HIGH

CVE-2026-46925

CWE-284Published: June 17, 2026· Updated: Jun 18, 2026

8.3

CVSS v3.1

Official Description

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

NVD Source

Technical Analysis

CVE-2026-46925 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.3.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.