CVE-2026-87264 Oracle Corporation CVE debrief

Who should care

Defenders responsible for PeopleSoft Enterprise PeopleTools, security teams, and IT administrators should assess exposure and potential impact. This includes verifying the exposure of affected versions 8.61-8.63, assessing potential impact on connected products, and monitoring for unauthorized data modifications. Additionally, security teams should review network access controls to limit low-privileged attacker access via HTTP and implement compensating

Why it matters

Defenders should care about CVE-2026-87264 because it allows low-privileged attackers to compromise PeopleSoft Enterprise PeopleTools, potentially impacting additional products and critical data. Defenders should verify exposure, assess potential impact, and monitor for unauthorized data modifications.

• Potential unauthorized creation, deletion, or modification of critical data
• Possible impact on additional products connected to PeopleSoft Enterprise PeopleTools
• Need to verify exposure of affected versions 8.61-8.63
• Potential for low-privileged attackers to compromise the product

Technical summary

The vulnerability in PeopleSoft Enterprise PeopleTools, component Integration Broker, allows low-privileged attackers with network access via HTTP to compromise the product. Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data. The vulnerability affects versions 8.61-8.63 of PeopleSoft Enterprise PeopleTools and has a CVSS 3.1 Base Score of 7.7, indicating a high severity level. Defenders should prioritize verifying exposure of affected versions and assessing potential impact on connected products.

Defensive priority

Defenders should prioritize verifying exposure of PeopleSoft Enterprise PeopleTools versions 8.61-8.63 and assessing potential impact on connected products.

Recommended defensive actions

• Verify PeopleSoft Enterprise PeopleTools versions 8.61-8.63 are in use and assess potential impact on connected products
• Review network access controls to limit low-privileged attacker access via HTTP
• Monitor for unauthorized creation, deletion, or modification of critical data
• Apply vendor patches or updates as available
• Conduct regular security audits to identify and address potential vulnerabilities
• Implement compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, affected versions, and potential impacts. However, additional information on exploitation or victim organizations is not available. The vulnerability is described as easily exploitable, with a CVSS 3.1 Base Score of 7.7 and a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N). The CVE record was published on 2026-09-15T20:19:15.040Z and has not been modified since then. The NVD entry and vendor advisory should be consulted for further details on mitigation,

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.