CVE-2026-61087 Oracle Corporation CVE debrief

Who should care

Organizations using Oracle PeopleSoft Enterprise FIN Payables version 9.2 should prioritize patching this vulnerability to prevent potential data breaches. IT teams responsible for PeopleSoft Enterprise FIN Payables deployments should review and apply Oracle's security patches. Security teams should monitor PeopleSoft Enterprise FIN Payables systems for suspicious activity and verify secure configurations.

Technical summary

The CVE-2026-61087 vulnerability is in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Payables accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Defensive priority

Oracle PeopleSoft Enterprise FIN Payables vulnerability allows unauthenticated network access via HTTP, potentially leading to unauthorized data access.

Recommended defensive actions

• Review and apply Oracle's security patches for PeopleSoft Enterprise FIN Payables version 9.2.
• Implement compensating controls such as network segmentation and access restrictions.
• Monitor PeopleSoft Enterprise FIN Payables systems for suspicious activity.
• Verify and enforce secure configurations for PeopleSoft Enterprise FIN Payables.
• Conduct a thorough review of PeopleSoft Enterprise FIN Payables deployments in managed environments.
• Track exceptions and retest remediated assets.

Evidence notes

The CVE-2026-61087 vulnerability affects Oracle PeopleSoft Enterprise FIN Payables version 9.2. It allows unauthenticated attackers with network access via HTTP to compromise the system, potentially leading to unauthorized access to critical data. The CVSS 3.1 Base Score is 7.5, indicating high severity due to confidentiality impacts. Defenders should verify and enforce secure configurations for PeopleSoft Enterprise FIN Payables.

Official resources