EIP-2026-104038

The vulnerability allows unauthorized execution of Oracle Reports by placing a malicious report file in a globally accessible location and triggering it via an HTTP GET request. This can lead to arbitrary command execution or file read/write operations with Oracle server privileges.