Vulnerability in Oracle PeopleSoft Supplier Registration Component

CVE-2026-91481

What is CVE-2026-91481?

This vulnerability affects the Supplier Registration component of the Oracle PeopleSoft Enterprise SCM Purchasing product, specifically version 9.2. It allows a low privileged attacker with network access via HTTP to potentially compromise the system. Successful exploitation of this vulnerability requires human interaction from an external user, significantly broadening the potential impact across connected systems. The attacker may gain unauthorized capabilities, including the ability to update, insert, or delete data within the PeopleSoft system, as well as unauthorized read access to a subset of the system’s accessible data. As a result, businesses using this version of PeopleSoft should take proactive measures to mitigate risks associated with this security flaw.

References