Remote Code Execution Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil by Oracle
CVE-2026-61233

9.8CRITICAL

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Fin Common Objects Brazil
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61233?

A remote code execution vulnerability exists in the PeopleSoft Enterprise FIN Common Objects Brazil product from Oracle, specifically within the Integration component. This flaw allows an unauthenticated attacker with network access via HTTP to exploit the system, potentially leading to unauthorized control over the application. Systems running the supported version 9.1 are susceptible to this threat, which, if successfully executed, can severely compromise the confidentiality, integrity, and availability of the application.

Affected Version(s)

PeopleSoft Enterprise FIN Common Objects Brazil 9.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.