A vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools (Cube Manager component) versions 8.61 through 8.63. It is a difficult to exploit flaw that requires a low privileged attacker with logon access to the infrastructure where PeopleSoft Enterprise PeopleTools runs. Successful exploitation can lead to full takeover of the PeopleSoft Enterprise PeopleTools environment. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides security patches for affected products.