CVE-2026-61053: High severity Oracle Communications Brm - Elastic Charging Engine vulnerability
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and SDK). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in takeover of Oracle Communications BRM - Elastic Charging Engine. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61053?
CVE-2026-61053 has a severity score of 7.8, classified as high.
How do I fix CVE-2026-61053?
To address CVE-2026-61053, ensure you apply the latest patches provided by Oracle for the affected versions.
What systems are affected by CVE-2026-61053?
CVE-2026-61053 affects Oracle Communications BRM - Elastic Charging Engine versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0.
Who can exploit CVE-2026-61053?
CVE-2026-61053 can be exploited by low privileged attackers, making it an easily exploitable vulnerability.
What type of data is at risk with CVE-2026-61053?
CVE-2026-61053 potentially compromises confidentiality, integrity, and availability of data processed by the affected systems.