This vulnerability affects Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2. It is easily exploitable by a high privileged attacker with network access via HTTP and can result in complete compromise of the product. The vulnerability has a CVSS 3.1 score of 9.1 with vector AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating network attack vector, low attack complexity, high privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and availability. While the vulnerability is localized to the Global Payroll Switzerland component, successful exploitation may impact additional Oracle products due to scope change. The vendor advisory from Oracle (July 2026 Critical Patch Update) lists this vulnerability among many others but does not explicitly confirm patch availability or remediation details for this specific CVE. No known exploits in the wild have been reported at this time.

Successful exploitation allows a high privileged attacker with network access to fully compromise PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2, resulting in complete loss of confidentiality, integrity, and availability of the affected system. The vulnerability's scope change means that additional Oracle products may also be significantly impacted by attacks leveraging this issue.

Patch status is not yet confirmed for CVE-2026-61235; the Oracle July 2026 Critical Patch Update advisory lists this vulnerability but does not explicitly confirm a fix for this specific issue. Oracle strongly recommends that customers remain on actively supported versions and apply Critical Patch Updates without delay. Users of PeopleSoft Enterprise HCM Global Payroll Switzerland 9.2 should monitor the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for the latest patch availability and remediation instructions and apply patches promptly once available.