This vulnerability affects Oracle PeopleSoft Enterprise SCM Manufacturing version 9.2 and involves a security flaw in the product's security component. An unauthenticated attacker with network access over HTTPS could exploit this vulnerability to gain unauthorized creation, deletion, or modification capabilities on critical data or access all data accessible by the product. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) indicates network attack vector, high attack complexity, no privileges or user interaction required, and high confidentiality and integrity impacts. Oracle's July 2026 Critical Patch Update advisory references multiple patches across products but does not explicitly confirm a patch for this specific vulnerability. The advisory emphasizes the importance of applying patches promptly to prevent exploitation of known vulnerabilities.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete unauthorized access to all data accessible by PeopleSoft Enterprise SCM Manufacturing 9.2. This compromises confidentiality and integrity of the affected system's data. There is no impact on availability reported. The vulnerability is difficult to exploit and requires network access via HTTPS but no authentication or user interaction.

Oracle has released a Critical Patch Update in July 2026 that addresses numerous vulnerabilities across its product portfolio. Although the advisory does not explicitly confirm a patch for CVE-2026-61210, customers should review the July 2026 Critical Patch Update documentation and apply all relevant patches for PeopleSoft Enterprise SCM Manufacturing 9.2 without delay. Oracle strongly recommends remaining on actively supported versions and promptly applying security patches to mitigate exploitation risks. Patch status is not yet confirmed explicitly for this vulnerability; check the vendor advisory for current remediation guidance.