CVE-2026-83269 – Oracle BI Publisher

CVSS 9.8 CRITICAL [2] Critical – Same Day Deployment

“Two Critical flaws in the platform that builds your business reports leave no room to wait on the patch.”

Oracle has released a security update for Oracle BI Publisher that fixes two Critical vulnerabilities. CVE-2026-83268 has a CVSS score of 9.1, Critical severity. CVE-2026-83269 has a CVSS score of 9.8, Critical severity. Both flaws affect the same product, so one update closes them together.

Oracle BI Publisher generates and distributes business reports, which often hold sensitive financial and operational data. Two Critical-rated flaws in this platform put that data at serious risk. Organizations running Oracle BI Publisher should apply this update the same day.

Key Details

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
CWE Classification
CWE-287
Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.