This vulnerability affects Oracle PeopleSoft Enterprise FIN Manufacturing Brazil component Integration in version 9.1. It is easily exploitable remotely without authentication over HTTPS and can lead to full system compromise. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vulnerability is listed in Oracle's July 2026 Critical Patch Update advisory, which contains numerous patches across Oracle products, but the advisory does not explicitly confirm a dedicated patch or remediation level for this specific CVE.

Successful exploitation allows an unauthenticated attacker with network access to completely take over the PeopleSoft Enterprise FIN Manufacturing Brazil system, impacting confidentiality, integrity, and availability. This could lead to unauthorized data access, modification, and service disruption.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory. However, the advisory content does not explicitly confirm a dedicated patch or remediation for CVE-2026-61245. Customers should review the July 2026 Critical Patch Update documentation and apply all relevant patches promptly. Oracle strongly recommends remaining on actively supported versions and applying security patches without delay to mitigate exploitation risks. Patch status is not yet confirmed specifically for this vulnerability — check the vendor advisory for current remediation guidance.