Main Vulnerability Database Vulnerabilities #VU162092

Improper input validation in Oracle E-Business Suite and Oracle Common Applications Calendar - CVE-2026-83186

Published: November 8, 2026

Vulnerability identifier: #VU162092

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-83186

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote authenticated user to modify data and cause limited service disruption.

The vulnerability exists due to improper input validation within the Applications Calendar component in Oracle Common Applications Calendar in Oracle E-Business Suite. A remote authenticated user can exploit this vulnerability to modify data and cause limited service disruption.

Affected software

Oracle E-Business Suite
Oracle Common Applications Calendar

How to mitigate CVE-2026-83186

Install updates from vendor's website.

External References

https://www.oracle.com/security-alerts/cspusep2026.html

Related Security Bulletins