CVE-2026-101763
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle…
- Risk score
- 71/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 0.4%
- Published
- 20 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A remotely exploitable vulnerability in Oracle Communications BRM - Elastic Charging Engine allows an unauthenticated attacker to take over the system. This could result in confidentiality, integrity, and availability impacts.
- Affected
- {'products': ['Oracle Communications BRM - Elastic Charging Engine'], 'packages': [], 'versions': ['15.0.0.0.0', '15.0.1.0.0', '15.1.0.0.0', '15.2.0.0.0']}
- Fix
- Check the linked advisory for the concrete fix
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in takeover of Oracle Communications BRM - Elastic Charging Engine. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Last activity 20 Oct 2026. Patch Forecast updates every hour.