CVE-2026-70861
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (component: Common Objects) version 9.1. A high-privileged attacker with network access via T3 or IIOP can compromise the system. Successful attacks may result in full takeover of PeopleSoft Enterprise FIN Common Objects Brazil.
Risk Assessment
Risk of full system takeover by a high-privileged attacker, potentially leading to complete compromise of data and services.
Recommendation
Apply Oracle patches and restrict access to T3 and IIOP protocols to trusted users only.
Other vulnerabilities in PeopleSoft Enterprise FIN Common Objects Brazil
See all- CVE-2026-91541Medium
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (Common Objects component) affecting version 9.1. An unauthenticated attacker via HTTP can modify data and cause partial denial of service. CVSS 6.5.
- CVE-2026-91476Medium
Vulnerability in the eProcurement component of PeopleSoft Enterprise FIN Common Objects Brazil (Oracle PeopleSoft) affecting version 9.1. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data accessible in the application.
- CVE-2026-91474Medium
Vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component eProcurement) version 9.1. A high-privileged attacker with access to the physical communication segment can create, delete, or modify critical data and gain full access to it without authorization.
- CVE-2026-61236High
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
- CVE-2026-61232High
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
- CVE-2026-61073High
In PeopleSoft Enterprise FIN Common Objects Brazil version 9.1, a vulnerability in the Purchasing component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS