CVE-2026-91356

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in PeopleSoft Enterprise HCM Global Payroll Switzerland

Publication date: 2026-10-20

Last updated on: 2026-10-28

Assigner: Oracle

Description

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise HCM Global Payroll Switzerland executes to compromise PeopleSoft Enterprise HCM Global Payroll Switzerland. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Global Payroll Switzerland accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Global Payroll Switzerland accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise HCM Global Payroll Switzerland. CVSS 3.1 Base Score 4.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-28

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-91356

EUVD

EUVD-2026-106610

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	PeopleSoft Enterprise HCM Global Payroll Switzerland	9.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability affects Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2. It allows a highly privileged attacker with local access to compromise the system. Successful exploitation can lead to unauthorized data access, modification, or deletion, as well as partial denial of service.

Detection Guidance

Detection requires identifying vulnerable Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland versions. Check installed software versions against 9.2. Review system logs for unauthorized access attempts or modifications to PeopleSoft data. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow attackers to read, modify, or delete sensitive payroll data for Switzerland. It may also disrupt payroll processing, causing partial system outages. The impact is limited to users with high privileges and local system access.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive employee data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Organizations must address it to maintain compliance.

Mitigation Strategies

Apply Oracle's official patches or updates for PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2. Restrict user privileges to minimize access. Monitor systems for suspicious activity and unauthorized changes.

Hi! I’m here to help you understand CVE-2026-91356. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...