Authentication Vulnerability in Oracle PeopleSoft Enterprise Products
CVE-2026-83427

6.6MEDIUM

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Peopletools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-83427?

This vulnerability affects Oracle's PeopleSoft Enterprise PeopleTools, specifically within the Multichannel Framework component. It is characterized by a difficult-to-exploit flaw that, when leveraged by an attacker with high privileges and network access via HTTP, can lead to a complete takeover of the PeopleSoft system. This poses significant risks to the integrity and confidentiality of sensitive data managed by the software. Users are advised to review Oracle's security alerts for detailed patching instructions.

Affected Version(s)

PeopleSoft Enterprise PeopleTools 8.61 <= 8.63

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.