IT SBIT Services
Schneeberger
DEEN
CVE tracker

Oracle Communications Billing and Revenue Management: Authentication bypass in BRM Server

CVE-2026-101765Critical 9.1

← All vulnerabilities

Summary

An unauthenticated remote attacker with network access via HTTP can exploit this flaw in the BRM Server component of Oracle Communications Billing and Revenue Management. Successful attacks can lead to unauthorized creation, modification or deletion of critical data and access to billing data managed by the product. The CVSS base score is 9.1 (critical), and the CNA reports the flaw as easily exploitable. The CWE mapping is CWE-287 and CWE-306 (missing authentication).

Affected

  • Oracle Communications Billing and Revenue Management 15.0.0.0.0
  • Oracle Communications Billing and Revenue Management 15.0.1.0.0
  • Oracle Communications Billing and Revenue Management 15.1.0.0.0
  • Oracle Communications Billing and Revenue Management 15.2.0.0.0
  • Component: BRM Server

Fixed in

Unknown. Check the Oracle Critical Patch Update October 2026 advisory for the BRM patch for each affected version.

Workaround

Unknown. Oracle's vendor text for this CVE could not be verified. Until a patch is applied, restrict network access to BRM Server HTTP interfaces to known internal hosts or VPN and ensure they are not reachable from the internet.

Exploitation

  • No confirmed exploitation known at the time of writing.
  • Not listed in the CISA Known Exploited Vulnerabilities catalog as of 21 October 2026, according to a third-party report; verify directly.
  • CISA SSVC: Exploitation none, automatable yes, technical impact total.
  • No public proof of concept found; absence in searches is not proof of absence.

Our recommendation

  • Confirm whether BRM Server versions 15.0 to 15.2 are in use.
  • Verify that BRM HTTP interfaces are not reachable from the internet.
  • Obtain the Oracle fix for your exact version via Oracle Support, test and deploy it.
  • Review HTTP access logs for unusual requests to BRM and monitor KEV and vendor channels.
  • Note that the advisory has several revisions; use the latest one.

Public exploits

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 05:47.

Original description (NVD)

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Communications Billing and Revenue Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

NVD references (1)

Sources

The tracker combines official, freely usable data sources – updated continuously:

This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touchRSS feed