PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-35279 Oracle Corporation CVE debrief

A vulnerability was discovered in PeopleSoft Enterprise PT PeopleTools, affecting versions 8.61 and 8.62. This difficult-to-exploit vulnerability allows unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools, potentially leading to a takeover. The vulnerability is located in the Performance Monitor component and has a CVSS 3.1 Base Score of 8.1, indicating high severity. Organizations should prioritize patching this vulnerability to prevent potential takeovers.

Vendor
Oracle Corporation
Product
PeopleSoft Enterprise PT PeopleTools
CVSS
HIGH 8.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-17
Original CVE updated
2026-06-24
Advisory published
2026-06-17
Advisory updated
2026-06-24

Who should care

Organizations using PeopleSoft Enterprise PT PeopleTools versions 8.61 and 8.62 should prioritize patching this vulnerability to prevent potential takeovers. This is particularly important for organizations that rely on PeopleSoft Enterprise PT PeopleTools for critical business operations. The vulnerability's high severity and potential for takeover make it a priority for patching.

Technical summary

The vulnerability, CVE-2026-35279, is located in the Performance Monitor component of PeopleSoft Enterprise PT PeopleTools. It has a CVSS 3.1 Base Score of 8.1, indicating high severity. The CVSS Vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, showing that the vulnerability allows attackers with network access to compromise the system without authentication. The vulnerability affects PeopleSoft Enterprise PT PeopleTools versions 8.61 and 8.62.

Defensive priority

High

Recommended defensive actions

  • Apply the vendor-provided patches for PeopleSoft Enterprise PT PeopleTools versions 8.61 and 8.62.
  • Implement compensating controls such as network segmentation and monitoring for suspicious activity.
  • Verify that no unauthorized access has occurred by reviewing system logs.
  • Consider enhancing authentication and authorization mechanisms for PeopleSoft Enterprise PT PeopleTools.
  • Review relevant monitoring, detection, and logs for exposed assets that need extra review.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record was published on 2026-06-17T10:40:20.187Z and was last modified on 2026-06-24T19:59:32.190Z. The NVD entry is currently Analyzed. This information is based on the NVD entry and the CVE record. The vulnerability affects PeopleSoft Enterprise PT PeopleTools versions 8.61 and 8.62. The CVE record and NVD entry provide additional context and details about the vulnerability.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-06-17T10:40:20.187Z and has not been modified since then. The NVD entry is currently Analyzed.