This vulnerability affects Oracle PeopleSoft Enterprise FIN Staffing Front Office Brazil, specifically version 9.1. It is classified under CWE-284 (Improper Access Control) and allows an attacker with low privileges and network access via HTTP to compromise the system. The vulnerability has a CVSS 3.1 score of 9.9, indicating critical impact across confidentiality, integrity, and availability. The vendor advisory from Oracle (July 2026 Critical Patch Update) does not explicitly confirm a patch or remediation for this specific vulnerability at this time. The advisory emphasizes the importance of applying available patches promptly but does not list a patch for this product/version combination.

Successful exploitation can result in complete takeover of the PeopleSoft Enterprise FIN Staffing Front Office Brazil product, impacting confidentiality, integrity, and availability of the system. The vulnerability is easily exploitable by an attacker with low privileges and network access via HTTP. Additionally, exploitation may have a scope change, potentially affecting other Oracle products beyond the initially targeted component.

Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle recommends applying security patches promptly for supported products. Until an official patch is available, restrict network access to the affected product and monitor for suspicious activity related to PeopleSoft Enterprise FIN Staffing Front Office Brazil.