A vulnerability exists in Oracle PeopleSoft Enterprise PRTL Interaction Hub version 9.1 that allows a low privileged attacker with network access via HTTP to compromise the system. The vulnerability can lead to unauthorized access to critical data or complete access to all data accessible through the Interaction Hub. The CVSS 3.1 base score is 7.7, indicating a high severity with significant confidentiality impact. Oracle has released a Critical Security Patch Update in September 2026 that addresses this vulnerability among many others.