cyfenced.com →

[ CVE-2026-91476 · Published 20 Oct 2026 ]

Vulnerability in Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil

CVSS 5.3 EPSS <1%3 agency advisoriesNo fix listed yet

[ Description ]Official description

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FIN Common Objects Brazil accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

  • NCSC-NLNCSC-2026-0439

    Vulnerabilities fixed in Oracle PeopleSoft Enterprise Translated from Dutch

    Probability/damage M/HCVE-2024-20925CVE-2026-9076CVE-2026-9563+106 more CVEs
  • CERT-FRCERTFR-2026-AVI-1352

    Multiple vulnerabilities in Oracle PeopleSoft Translated from French

    Multiple vulnerabilities have been discovered in Oracle PeopleSoft. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.

    CVE-2026-91471CVE-2026-91485CVE-2026-101450+148 more CVEs
  • BSI CERT-BundWID-SEC-2026-4082

    Oracle PeopleSoft: Multiple vulnerabilities Translated from German

    Risk highCVE-2026-101410CVE-2026-91481CVE-2026-101417+106 more CVEs

[ References ]References