Exploitable Vulnerability Found in Oracle PeopleSoft's Push Notifications Component

CVE-2026-21934

What is CVE-2026-21934?

An exploitable vulnerability exists in the Push Notifications component of Oracle PeopleSoft's Enterprise PeopleTools, impacting versions 8.60, 8.61, and 8.62. This issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized manipulation of accessible data, including updates, inserts, and deletions, as well as unauthorized reading of sensitive information. It is crucial for organizations to address this vulnerability to safeguard their data and maintain the integrity of their systems.

References