This vulnerability affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1, specifically the Integration component. It is easily exploitable by unauthenticated attackers over the network via HTTP and can lead to full compromise of the product. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects that no privileges or user interaction are required, and the impact on confidentiality, integrity, and availability is high. Oracle's July 2026 Critical Patch Update advisory mentions numerous patches across products but does not explicitly confirm a patch for this CVE in the provided excerpt.

Successful exploitation results in complete takeover of the PeopleSoft Enterprise FIN Common Objects Brazil product, impacting confidentiality, integrity, and availability. This means attackers can gain full control, potentially leading to data breaches, unauthorized modifications, and service disruption.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until a patch is confirmed and applied, restrict network access to the affected service where possible.