This vulnerability affects Oracle PeopleSoft Enterprise FIN Common Objects Argentina, specifically version 9.1. It is easily exploitable by a low privileged attacker over the network via HTTP, resulting in complete compromise of the product. The CVSS 3.1 base score is 9.9, indicating critical impact on confidentiality, integrity, and availability. The vulnerability's scope may extend to other Oracle products. Oracle's July 2026 Critical Patch Update advisory references multiple patches but does not explicitly confirm a patch for this CVE. Customers are strongly advised to apply available patches from Oracle promptly to mitigate risks.

Successful exploitation can lead to full takeover of the PeopleSoft Enterprise FIN Common Objects Argentina product, severely impacting confidentiality, integrity, and availability of the system. The vulnerability also has potential to affect additional Oracle products due to scope change, increasing the risk footprint.

Oracle's July 2026 Critical Patch Update advisory recommends applying security patches without delay. Although no explicit patch for CVE-2026-61242 is confirmed in the advisory text, customers should review the July 2026 CPU documentation and apply all relevant patches for PeopleSoft Enterprise FIN Common Objects Argentina version 9.1. Maintaining up-to-date patches is critical to mitigate this vulnerability.