This vulnerability exists in the Job Opening component of PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2. It is easily exploitable by an attacker with low privileges and network access over HTTP, enabling compromise and takeover of the product. The vulnerability has a CVSS 3.1 score of 9.9, indicating critical impact on confidentiality, integrity, and availability. The scope of impact may extend beyond the Talent Acquisition Manager to other Oracle products. Oracle's July 2026 Critical Patch Update advisory references numerous patches across products but does not explicitly confirm a patch for this CVE in the provided text.

Successful exploitation can lead to complete takeover of PeopleSoft Enterprise HCM Talent Acquisition Manager, compromising confidentiality, integrity, and availability of the system. The vulnerability's scope change means that additional Oracle products may be significantly impacted by attacks exploiting this issue.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying all relevant security patches promptly and remaining on actively supported versions. Until a specific patch is confirmed, monitor Oracle advisories for updates and apply any released fixes immediately.