This vulnerability affects Oracle PeopleSoft Enterprise SCM Order Management version 9.2, specifically in the security component. It is easily exploitable by an attacker with low privileges who has logon access to the infrastructure where the product runs. Successful exploitation can lead to complete compromise of the PeopleSoft Enterprise SCM Order Management system. The CVSS 3.1 base score is 7.8, indicating high severity, with impacts on confidentiality, integrity, and availability. The vulnerability is referenced in Oracle's July 2026 Critical Patch Update advisory, which addresses numerous vulnerabilities across Oracle products, but no explicit patch or remediation level is provided for this specific CVE in the advisory content.

An attacker with low privileges and logon access to the infrastructure can exploit this vulnerability to fully compromise the PeopleSoft Enterprise SCM Order Management system. This includes complete loss of confidentiality, integrity, and availability of the affected product, potentially allowing takeover of the system.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory. However, the provided advisory content does not explicitly confirm the availability of a specific patch for CVE-2026-61055. Customers are strongly advised to review the July 2026 Critical Patch Update documentation on Oracle's official site and apply all relevant patches promptly. Until explicit patch information is confirmed, monitor Oracle advisories for updates. No vendor advisory states that no action is required or that the issue is already mitigated.