This vulnerability (CVE-2026-47026) affects Oracle PeopleSoft Enterprise PeopleTools, specifically versions 8.61 and 8.62, involving the OpenSearch Dashboards component. It is an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise the system, contingent on user interaction by a third party. The vulnerability has a CVSS 3.1 base score of 7.4, indicating high severity with a significant confidentiality impact and scope change affecting additional products. The vulnerability is classified under CWE-601. Oracle's July 2026 Critical Patch Update advisory references this and many other vulnerabilities but does not explicitly state patch availability or remediation details for PeopleSoft Enterprise PeopleTools 8.61 and 8.62.

Successful exploitation can result in unauthorized access to critical or all accessible data within PeopleSoft Enterprise PeopleTools, impacting confidentiality. The vulnerability does not affect integrity or availability. The attack requires user interaction from a person other than the attacker, and the scope of impact may extend beyond PeopleSoft Enterprise PeopleTools to additional products.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly when available and remaining on actively supported versions. Until a patch is confirmed and applied, organizations should consider restricting network access to PeopleSoft Enterprise PeopleTools HTTP interfaces and educate users to be cautious of unexpected interactions that could trigger exploitation.