CVE-2026-91519: access control vulnerability in Oracle PeopleSoft Enterprise PeopleTools
A vulnerability in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools allows a low-privileged attacker with network access via HTTP to obtain unauthorized access to critical data or all accessible data. Affected versions are 8.61–8.63. The CVSS 3.1 base score is 6.5.
CERT24