CVE-2026-87264 is a vulnerability in the Integration Broker component of Oracle PeopleSoft Enterprise PeopleTools affecting versions 8.61 through 8.63. It allows a low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability impacts data integrity but not confidentiality or availability, with a CVSS 3.1 score of 7.7 (AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N). Oracle has included a fix for this vulnerability in its September 2026 Critical Security Patch Update, which contains 673 security patches across multiple Oracle products.

Exploitation of this vulnerability can result in unauthorized modification of critical data within PeopleSoft Enterprise PeopleTools, potentially affecting the integrity of all accessible data. The vulnerability does not impact confidentiality or availability directly but has a scope change affecting additional products beyond PeopleTools. The CVSS score of 7.7 reflects a high severity due to the ease of exploitation over the network and the significant integrity impact.

Oracle has released a security patch addressing this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly to mitigate the risk. Oracle recommends remaining on actively supported versions and applying security patches without delay. No additional vendor advisory states that no action is required or that the issue is already mitigated without patching.