CVE-2026-61076
PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2 has a critical flaw that lets an attacker with low privileges and network access over HTTP take over the system. The vulnerability can be exploited without user interaction and can affect other connected products. It is rated critical due to its high impact on confidentiality, integrity, and availability.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
PeopleSoft Enterprise HCM Talent Acquisition Manager 9.2, used by organizations for HR and talent acquisition.
Real-world impact
An attacker could gain full control of the PeopleSoft system, steal or alter employee data, and disrupt HR processes.
Why this severity
The CVSS score of 9.9 reflects that the flaw can be exploited over the network with low effort, requires only low privileges, no user interaction, and changes the scope to affect other components, giving complete confidentiality, integrity, and availability loss.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources
Timeline
- Jul 21, 2026 · 11d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 24, 2026 · 8d agoAdvisory updatedThe NVD record was last revised.