CVE-2026-83016 is a vulnerability in the PeopleSoft Enterprise PeopleTools product, specifically the SQR component, affecting versions 8.61 to 8.63. The flaw is difficult to exploit and requires a high privileged attacker with logon access to the infrastructure where PeopleSoft Enterprise PeopleTools runs, along with human interaction from a user other than the attacker. Successful exploitation results in a complete takeover of PeopleSoft Enterprise PeopleTools and may affect other products due to scope change. The CVSS 3.1 score is 7.2 with vector AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H, indicating local attack vector, high attack complexity, high privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. Oracle has included a fix for this vulnerability in its September 2026 Critical Security Patch Update.

Successful exploitation allows a high privileged attacker with local access and requiring user interaction to fully compromise PeopleSoft Enterprise PeopleTools, potentially leading to takeover of the product and impacting additional Oracle products. The vulnerability affects confidentiality, integrity, and availability of the system.

Oracle has released patches for this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply these security patches promptly to mitigate the vulnerability. Oracle recommends remaining on actively supported versions and applying patches without delay. No alternative mitigations or temporary fixes are indicated in the advisory.