CVE-2026-61244
A critical flaw in Oracle PeopleSoft's Manufacturing Argentina module lets anyone on the network create, delete, or change sensitive data without authentication. The bug can be triggered over HTTP and gives attackers full control over the system’s data. It is rated CVSS 9.1 for its severe confidentiality and integrity impact.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Oracle PeopleSoft Enterprise FIN Manufacturing Argentina, version 9.1.
Real-world impact
An attacker could add, delete, or alter critical business data, or gain complete access to all data stored in the Manufacturing Argentina module, potentially disrupting operations and compromising sensitive information.
Why this severity
The CVSS score of 9.1 reflects that the vulnerability is network‑accessible, requires no authentication, and can lead to total loss of confidentiality and integrity of data, but does not affect availability.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources