Skip to content
Critical Vulnerability in Oracle Communications BRM Exploited via RMI

Critical Vulnerability in Oracle Communications BRM Exploited via RMI

First seen 21 Oct 2026, 15:41 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 17:09 UTC
  • •CVE-2026-101763 affects Oracle Communications BRM versions 15.0.0.0.0 to 15.2.0.0.0.
  • •The vulnerability allows unauthenticated remote exploitation via the RMI protocol.
  • •Oracle has released a patch; immediate application is recommended.

A critical vulnerability, CVE-2026-101763, has been identified in Oracle Communications BRM - Elastic Charging Engine, affecting versions 15.0.0.0.0 to 15.2.0.0.0. This flaw allows unauthenticated attackers with network access via the RMI protocol to take complete control of the system, including executing arbitrary code and disrupting service availability. Currently, there is no evidence of public proof-of-concept or. Oracle has released a patch to address this vulnerability, and users are urged to apply it immediately and restrict network access to trusted systems only. The CVSS score assigned to this vulnerability is 9.8, indicating a critical severity level.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-20
CVE-2026-101763 published
Oracle disclosed a critical vulnerability in its BRM - Elastic Charging Engine affecting multiple versions.
cve.report
2026-10-21
Patch released
Oracle released a security patch for CVE-2026-101763 and advised immediate application.
Feedly

More articles in this cluster (5)

Following this threat?

Track Oracle and CVE-2026-101763 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 2

Common questions

What versions of Oracle Communications BRM are affected?
Versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 are affected.
Is there any known exploitation of this vulnerability?
Currently, there is no evidence of active exploitation or public proof-of-concept.
What immediate actions should be taken?
Apply the available security patch from Oracle and restrict network access to RMI ports.