CVE-2026-91559

MediumCVSS 4.4

Published: 20/10/2026(UTC)Updated: 26/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Vulnerability in PeopleSoft Enterprise FIN Manufacturing Brazil (Integration component) affecting version 9.1. A low-privileged attacker with logon access to the infrastructure can modify data and cause partial denial of service. CVSS 4.4.

Risk Assessment

Possible unauthorized changes to manufacturing and integration data and availability disruptions, which may affect production processes.

Recommendation

Apply the Oracle patch for version 9.1 and restrict local access to the PeopleSoft infrastructure.

Other vulnerabilities in PeopleSoft Enterprise FIN Manufacturing Brazil

CVE-2026-61245Critical
Vulnerability in Oracle PeopleSoft Enterprise FIN Manufacturing Brazil (component: Integration). Affects version 9.1. Easily exploitable by an unauthenticated attacker with network access via HTTPS. Successful attack can lead to full system takeover.

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Manufacturing Brazil executes to compromise PeopleSoft Enterprise FIN Manufacturing Brazil. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Manufacturing Brazil accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise FIN Manufacturing Brazil. CVSS 3.1 Base Score 4.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS