CVE-2026-61245
A critical flaw exists in Oracle PeopleSoft Enterprise FIN Manufacturing Brazil version 9.1 that lets anyone on the network reach the system over HTTPS and take full control. The vulnerability is easy to exploit and requires no authentication. If used, an attacker could hijack the entire application.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Oracle PeopleSoft Enterprise FIN Manufacturing Brazil, version 9.1, used by organizations that run manufacturing operations in Brazil.
Real-world impact
An attacker who exploits this flaw can gain complete control of the PeopleSoft application, reading, modifying, or deleting data, and potentially disrupting business operations.
Why this severity
The CVSS score of 9.8 reflects that the flaw is network‑accessible (AV:N), requires no authentication (PR:N), has no user interaction (UI:N), and gives an attacker full confidentiality, integrity, and availability impact (C:H/I:H/A:H).
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources