PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-61087 Oracle Corporation CVE debrief

The CVE-2026-61087 vulnerability is a security issue in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft. The affected version is 9.2. This vulnerability allows unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables, potentially leading to unauthorized access to critical data. Organizations should review and apply Oracle's security patches for PeopleSoft Enterprise FIN Payables version 9.2. The CVSS 3.1 Base Score is 7.5, indicating high severity due to confidentiality impacts.

Vendor
Oracle Corporation
Product
PeopleSoft Enterprise FIN Payables
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-21
Original CVE updated
2026-08-06
Advisory published
2026-07-21
Advisory updated
2026-08-06

Who should care

Organizations using Oracle PeopleSoft Enterprise FIN Payables version 9.2 should prioritize patching this vulnerability to prevent potential data breaches. IT teams responsible for PeopleSoft Enterprise FIN Payables deployments should review and apply Oracle's security patches. Security teams should monitor PeopleSoft Enterprise FIN Payables systems for suspicious activity and verify secure configurations.

Technical summary

The CVE-2026-61087 vulnerability is in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Payables accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Defensive priority

Oracle PeopleSoft Enterprise FIN Payables vulnerability allows unauthenticated network access via HTTP, potentially leading to unauthorized data access.

Recommended defensive actions

  • Review and apply Oracle's security patches for PeopleSoft Enterprise FIN Payables version 9.2.
  • Implement compensating controls such as network segmentation and access restrictions.
  • Monitor PeopleSoft Enterprise FIN Payables systems for suspicious activity.
  • Verify and enforce secure configurations for PeopleSoft Enterprise FIN Payables.
  • Conduct a thorough review of PeopleSoft Enterprise FIN Payables deployments in managed environments.
  • Track exceptions and retest remediated assets.

Evidence notes

The CVE-2026-61087 vulnerability affects Oracle PeopleSoft Enterprise FIN Payables version 9.2. It allows unauthenticated attackers with network access via HTTP to compromise the system, potentially leading to unauthorized access to critical data. The CVSS 3.1 Base Score is 7.5, indicating high severity due to confidentiality impacts. Defenders should verify and enforce secure configurations for PeopleSoft Enterprise FIN Payables.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-61087 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-61087

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-61087 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-61087

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.