CVE-2026-91243: Critical access-control vulnerability in Oracle Business Process Management Suite

A vulnerability in Oracle Business Process Management Suite allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation may enable unauthorized creation, deletion, or modification of critical data or all data accessible to the application, as well as unauthorized access to that data.