This vulnerability affects Oracle PeopleSoft Enterprise FIN Common Objects Argentina, specifically version 9.1. It is exploitable by an unauthenticated attacker who has access to the physical communication segment attached to the hardware running the product. The attacker can compromise the product, resulting in unauthorized access to critical data and unauthorized data modification. The vulnerability has a CVSS 3.1 vector of AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N, indicating that the attack requires adjacent network access with low attack complexity, no privileges or user interaction, and impacts confidentiality and integrity with scope change. The vendor advisory from Oracle references a Critical Patch Update released in July 2026 covering multiple vulnerabilities but does not explicitly confirm a patch for this specific CVE. Patch status is therefore not confirmed and should be verified with Oracle's advisory.

Successful exploitation can result in unauthorized access to critical data and unauthorized update, insert, or delete operations on some data accessible by PeopleSoft Enterprise FIN Common Objects Argentina. The vulnerability affects confidentiality and integrity with a high severity score of 8.2. The scope of impact may extend to additional Oracle products beyond the initially affected PeopleSoft component.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until a patch is confirmed and applied, restrict access to the physical communication segment attached to the affected hardware to trusted personnel only to reduce risk.