This vulnerability (CVE-2026-47026) affects Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62, specifically the OpenSearch Dashboards component. It is an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise the product. Exploitation requires user interaction from a third party. The vulnerability can lead to unauthorized access to critical or all accessible PeopleSoft Enterprise PeopleTools data, representing a confidentiality breach. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, high confidentiality impact, and no integrity or availability impact. The vendor advisory does not explicitly confirm patch availability or remediation level for this specific vulnerability but references Oracle's Critical Patch Update advisory for July 2026, which includes numerous patches across Oracle products. No known exploits in the wild have been reported.

Successful exploitation can result in unauthorized access to critical or all accessible data within PeopleSoft Enterprise PeopleTools, leading to a significant confidentiality breach. There is no reported impact on integrity or availability. The vulnerability affects the confidentiality of sensitive information accessible through the affected versions.

The vendor advisory does not explicitly confirm a patch or remediation level for this specific vulnerability. Oracle's Critical Patch Update advisory for July 2026 should be consulted for patch availability and installation instructions. Oracle strongly recommends that customers remain on actively supported versions and apply security patches without delay to mitigate this and other vulnerabilities. Until a specific patch is confirmed, organizations should monitor Oracle advisories closely and apply updates as soon as they become available.