CVE-2026-70861

Awaiting Analysis Awaiting Analysis - Queue

Takeover Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil

Publication date: 2026-08-18

Last updated on: 2026-08-21

Assigner: Oracle

Description

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-21

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-70861

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	peoplesoft_enterprise_fin_common_objects_brazil	9.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1. It allows a high privileged attacker with network access to compromise the system via T3 or IIOP protocols. Successful exploitation could lead to complete takeover of the affected product.

Detection Guidance

This vulnerability affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 via T3 or IIOP protocols. Detection requires checking for exposed T3/IIOP ports (typically 7001 for WebLogic) and verifying PeopleSoft version 9.1 is running. Use commands like 'netstat -tulnp | grep 7001' to check open ports and 'ps -ef | grep -i peoplesoft' to verify running processes.

Impact Analysis

If you use PeopleSoft Enterprise FIN Common Objects Brazil version 9.1, an attacker could gain control of your system. This may result in unauthorized access to sensitive data, modification of critical information, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using the affected product may face legal and regulatory penalties.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update for PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 to address the vulnerability. Ensure network access controls restrict T3 and IIOP protocols to trusted sources only.

Hi! I’m here to help you understand CVE-2026-70861. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70