Vulnerability in Oracle Payroll Product Affects Oracle E-Business Suite
CVE-2026-46826

8.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Payroll
Vendor
CVE Published:
28 May 2026

What is CVE-2026-46826?

A security vulnerability in Oracle Payroll within the Oracle E-Business Suite has been identified, allowing attackers with low privileges and network access via HTTPS to exploit the system. This flaw can lead to a complete takeover of the Oracle Payroll component, compromising the system's confidentiality, integrity, and availability. It is crucial for organizations using affected versions to implement security measures and patch the vulnerability promptly to protect sensitive payroll data.

Affected Version(s)

Oracle Payroll 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cspumay2026.html
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.