This vulnerability affects Oracle PeopleSoft Enterprise FIN General Ledger Argentina version 9.1. It permits a low privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized creation, deletion, or modification of critical data and the ability to cause a partial denial of service. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact. The vendor advisory references Oracle's July 2026 Critical Patch Update but does not explicitly confirm a patch for this specific vulnerability. Oracle strongly recommends applying security patches promptly to mitigate such vulnerabilities.

Successful exploitation can lead to unauthorized modification of critical data within PeopleSoft Enterprise FIN General Ledger Argentina and cause a partial denial of service. Confidentiality is not impacted, but integrity and availability are affected. The attack requires network access and low privileges but is difficult to exploit.

Oracle's July 2026 Critical Patch Update advisory recommends applying available security patches promptly. Although the advisory does not explicitly confirm a patch for CVE-2026-61069, customers should review the advisory and apply relevant patches for PeopleSoft Enterprise FIN General Ledger Argentina version 9.1. Maintaining up-to-date patching is the primary mitigation. No vendor statement indicates that no action is required or that the issue is already mitigated.