A vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools component SQR affecting versions 8.61 through 8.63. This vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or cause a denial of service by crashing the application. The CVSS 3.1 base score is 8.1, indicating high severity with impacts on confidentiality and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.