PatchSiren cyber security CVE debrief
CVE-2026-61233 Oracle Corporation CVE debrief
A critical vulnerability was identified in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft. The vulnerability has a CVSS 3.1 Base Score of 9.8, indicating a high impact on confidentiality, integrity, and availability. The supported version affected is 9.1. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise PeopleSoft Enterprise FIN Common Objects Brazil, potentially leading to a takeover of the system. Organizations using Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 should prioritize patching this vulnerability to prevent potential system takeovers.
- Vendor
- Oracle Corporation
- Product
- PeopleSoft Enterprise FIN Common Objects Brazil
- CVSS
- CRITICAL 9.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-21
- Original CVE updated
- 2026-07-22
- Advisory published
- 2026-07-21
- Advisory updated
- 2026-07-22
Who should care
Organizations using Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 should prioritize patching this vulnerability to prevent potential system takeovers. This is a critical vulnerability with a high impact on confidentiality, integrity, and availability. Security teams and vulnerability management teams should review the official advisory and plan for remediation.
Technical summary
The vulnerability is located in the Integration component of PeopleSoft Enterprise FIN Common Objects Brazil. It allows an unauthenticated attacker with network access via HTTP to compromise the system easily. Successful attacks can result in a takeover of PeopleSoft Enterprise FIN Common Objects Brazil. The CVSS Vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. This vulnerability affects organizations using Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1.
Defensive priority
High
Recommended defensive actions
- Apply the patch provided by Oracle
- Restrict access to PeopleSoft Enterprise FIN Common Objects Brazil
- Monitor for suspicious activity
- Review compensating controls for exposed systems while remediation is scheduled and verified
- Check relevant monitoring, detection, and logs for exposed assets that need extra review
- Track exceptions, retest remediated assets, and close the item only after evidence is documented
- Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
Evidence notes
The CVE record was published on 2026-07-21T22:18:54.133Z and was last modified on 2026-07-22T20:17:06.437Z. The NVD entry is currently being reviewed. Oracle has provided a security alert for July 2026. A critical vulnerability was identified in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft. The vulnerability has a CVSS 3.1 Base Score of 9.8, indicating a high impact on confidentiality, integrity, and availability. The supported version affected is 9.1. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise PeopleSoft Enterprise FIN Common Objects Brazil, potentially leading to a takeover of the system.
Official resources
-
CVE-2026-61233 CVE record
CVE.org
-
CVE-2026-61233 NVD detail
NVD
-
Source item URL
nvd_modified
- Source reference
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:18:54.133Z and has not been modified since then.