A critical vulnerability identified as CVE-2026-101431 has been discovered in Oracle PeopleSoft Enterprise PeopleTools. This vulnerability affects versions 8.61 to 8.63 of the software.
The flaw allows attackers with low privileges and network access to compromise the system via HTTP. Successful exploitation requires human interaction and can lead to unauthorized access and modification of critical data.
The vulnerability has been assigned a CVSS score of 8.7, indicating its high severity. It is specifically linked to the Test Framework component of PeopleTools.
Oracle has provided a fix for this vulnerability, and organizations are urged to apply it promptly.
The National Cyber Security Centre (NCSC) has developed a machine-learning driven score to assess the relevance of this vulnerability for Dutch organizations.