CVE-2026-91241: critical access-control vulnerability in Oracle Business Intelligence Enterprise Edition

A vulnerability in Oracle Business Intelligence Enterprise Edition allows a highly privileged attacker with network access via HTTP to take over the system. Affected versions are 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0.