CVE-2026-91476 Oracle Corporation CVE debrief

Who should care

Defenders and security teams responsible for PeopleSoft Enterprise FIN Common Objects Brazil deployments, especially version 9.1, should assess exposure and potential risks. This includes verifying usage, evaluating network access controls, and monitoring for suspicious activity. Security teams should also review current security patches and update schedules for PeopleSoft Enterprise FIN Common Objects Brazil, and assess the need for compensating controls.

Why it matters

CVE-2026-91476 is a medium-severity vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil that allows unauthorized read access to a subset of data. Defenders should verify exposure, assess data access risks, and prioritize security measures.

• Verification of PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 usage and exposure to HTTP network access.
• Assessment of potential unauthorized data access risks and monitoring for suspicious activity.
• Evaluation of current network access controls and HTTP security measures.

Technical summary

The vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil, component: eProcurement, allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized read access to a subset of accessible data. The CVSS 3.1 Base Score is 5.3 (Confidentiality impacts). This medium-severity vulnerability affects version 9.1 of the software and defenders should prioritize verifying exposure and assessing potential data access risks, especially in environments using PeopleSoft Enterprise FIN Common Objects Brazil 9.1.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential data access risks, especially in environments using PeopleSoft Enterprise FIN Common Objects Brazil 9.1.

Recommended defensive actions

• Verify if PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 is in use and assess potential exposure.
• Review network access controls and HTTP security measures.
• Monitor for potential unauthorized data access attempts.
• Evaluate current security patches and update schedules for PeopleSoft Enterprise FIN Common Objects Brazil.
• Assess the need for compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, its CVSS score of 5.3, and the affected version 9.1 of PeopleSoft Enterprise FIN Common Objects Brazil. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized read access to a subset of accessible data. Defenders should verify exposure, assess data access risks, and prioritize security measures. The information available indicates a need for defenders to review current 9.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.