Oracle PeopleSoft FIN Common Objects Brazil 9.1 Unauth HTTP RCE
CVE-2026-61074 Published on July 21, 2026

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-61074 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Products Associated with CVE-2026-61074

stack.watch emails you whenever new vulnerabilities are published in Oracle Peoplesoft Enterprise Fin Common Objects Brazil or Oracle. Just hit a watch button to start following.

Oracle Peoplesoft Enterprise Fin Common Objects Brazil
 
Oracle
 

Affected Versions

Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil Version 9.1 is affected by CVE-2026-61074