Description
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in takeover of Oracle Communications BRM - Elastic Charging Engine. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-10-20
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Patch Immediately
AI Analysis

Impact

The Oracle Communications BRM Elastic Charging Engine is compromised by an unauthenticated RMI-based vulnerability that permits an attacker with network access to execute arbitrary operations, leading to full system takeover. This weakness affords both confidentiality and integrity violations and results in total loss of availability for the billing platform.

Affected Systems

The affected product is Oracle Corporation’s Oracle Communications BRM Elastic Charging Engine. Versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 are listed as vulnerable. The component targeted is the cloud native deployment of the engine.

Risk and Exploitability

The CVSS base score is 9.8, indicating high severity. The EPSS score is 0.49% and the vulnerability is not yet listed in the CISA KEV catalog. The likely attack vector is over a network via the RMI interface, requiring no authentication. Successful exploitation can result in complete takeover of the exposed service and, by extension, the entire BRM environment.

Generated by OpenCVE AI on October 22, 2026 at 09:53 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply Oracle’s latest update for the Elastic Charging Engine that addresses the RMI authentication bypass (expected in 15.2.0.1 or later).
  • Limit inbound RMI traffic at the network perimeter to trusted hosts only, using firewall rules or segmentation, to mitigate exposure until a patch is applied.
  • If the RMI service remains necessary, enforce authentication or TLS on the RMI endpoint as a temporary mitigation to block unauthenticated access.

Generated by OpenCVE AI on October 22, 2026 at 09:53 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 22 Oct 2026 10:15:00 +0000

Type Values Removed Values Added
Title Unauthenticated RMI Remote Code Execution in Oracle Communications BRM Elastic Charging Engine

Wed, 21 Oct 2026 11:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-306
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 02:00:00 +0000

Type Values Removed Values Added
Title Unauthenticated RMI Remote Code Execution in Oracle Communications BRM Elastic Charging Engine
Weaknesses CWE-284
CWE-287

Tue, 20 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Description Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in takeover of Oracle Communications BRM - Elastic Charging Engine. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
First Time appeared Oracle
Oracle communications Brm - Elastic Charging Engine
CPEs cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:15.0.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:15.0.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:15.1.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:15.2.0.0.0:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle communications Brm - Elastic Charging Engine
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Oracle Communications Brm - Elastic Charging Engine
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-10-21T11:05:29.614Z

Reserved: 2026-09-28T15:40:09.505Z

Link: CVE-2026-101763

cve-icon Vulnrichment

Updated: 2026-10-21T10:55:12.330Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-20T22:18:31.607

Modified: 2026-10-21T18:44:55.490

Link: CVE-2026-101763

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T10:00:05Z

Weaknesses
  • CWE-284

    Improper Access Control

  • CWE-287

    Improper Authentication

  • CWE-306

    Missing Authentication for Critical Function