{"id":"CVE-2026-101416","kind":"vulnerability","aliases":["CVE-2026-101416"],"related":[],"title":"Oracle PeopleSoft PeopleTools: PsAdmin flaw allows full takeover from adjacent network","description":"Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).","summary":"Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 contain a flaw in the PsAdmin component. An unauthenticated attacker on the physical communication segment attached to the host can compromise the PeopleTools installation and take it over.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["on-prem","oracle","package","peoplesoft","peopletools"],"not_affected_if":["isolated-network-segment","other-peopletools-versions"],"how_to_check":"- Confirm the installed PeopleTools release for versions `8.61`, `8.62` or `8.63`\n- Check whether the host sits on a network segment reachable by untrusted hosts (unknown from sources)","fix":"- Apply the Oracle Critical Patch Update for PeopleSoft PeopleTools covering this CVE (patch version unknown from sources)\n- Restrict network access to the PeopleSoft host segment until patched","status":"open","published_at":"2026-10-20T22:17:49+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","triaged_at":"2026-10-25T03:22:42+00:00","updated_at":"2026-10-25T03:22:42+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T03:22:42Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Critical Patch Update for PeopleSoft PeopleTools covering this CVE (patch version unknown from sources)\n- Restrict network access to the PeopleSoft host segment until patched","reach":"network","title":"Oracle PeopleSoft PeopleTools: PsAdmin flaw allows full takeover from adjacent network","impact":"high","summary":"Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 contain a flaw in the PsAdmin component. An unauthenticated attacker on the physical communication segment attached to the host can compromise the PeopleTools installation and take it over.","category":"package","nicknames":[],"who_cares":["peoplesoft","peopletools","oracle","on-prem"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker takes over the PeopleTools installation, with full confidentiality, integrity and availability impact.","analyst_note":"Check the Oracle Critical Patch Update advisory for the patched PeopleTools release and confirm whether the attack vector is truly adjacent-only, since the sources say physical communication segment.","how_to_check":"- Confirm the installed PeopleTools release for versions `8.61`, `8.62` or `8.63`\n- Check whether the host sits on a network segment reachable by untrusted hosts (unknown from sources)","needs_analyst":true,"not_affected_if":["other-peopletools-versions","isolated-network-segment"],"who_is_affected":"Organizations running Oracle PeopleSoft Enterprise PeopleTools 8.61 to 8.63 where an attacker could reach the network segment the host is attached to. The sources describe the attack as requiring physical or adjacent communication-segment access, so internet-only exposure is not indicated. Teams whose PeopleTools is on a fully isolated or other-version release can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000697,"input_tokens":3516,"output_tokens":690,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101416':14A,17A '-2026':13A,16A '-8.63':78C '/av':135C '3.1':122C,134C '7.5':125C '8.61':30B,77C '8.63':32B 'a/ac':136C 'access':87C 'adjac':10A 'affect':75C 'allow':6A,83C 'attach':48B,93C 'attack':42B,85C,109C 'avail':129C 'base':123C 'communic':46B,91C 'compon':39B,69C 'compromis':53B,104C 'confidenti':126C 'contain':33B 'cve':12A,15A 'cvss':121C,131C,133C 'difficult':79C 'enterpris':27B,63C,100C,106C,119C 'execut':102C 'exploit':81C 'flaw':5A,35B 'full':7A 'h':143C 'h/a':142C 'h/i':141C 'h/pr':137C 'hardwar':96C 'host':51B 'impact':130C 'instal':56B 'integr':127C 'n/s':139C 'n/ui':138C 'network':11A 'on-prem':18B 'oracl':1A,21B,25B,67C 'packag':22B 'peoplesoft':2A,23B,26B,62C,68C,99C,105C,118C 'peopletool':3A,24B,28B,55B,64C,101C,107C,120C 'physic':45B,90C 'prem':20B 'product':65C 'psadmin':4A,38B,70C 'result':114C 'score':124C 'segment':47B,92C 'success':108C 'support':71C 'take':58B 'takeov':8A,116C 'u/c':140C 'unauthent':41B,84C 'vector':132C 'version':29B,72C 'vulner':59C,82C,112C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle PeopleSoft Enterprise PeopleTools 8.61 to 8.63 where an attacker could reach the network segment the host is attached to. The sources describe the attack as requiring physical or adjacent communication-segment access, so internet-only exposure is not indicated. Teams whose PeopleTools is on a fully isolated or other-version release can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:49+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101416","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101416","severity":null,"published_at":"2026-10-20T22:17:49+00:00","modified_at":"2026-10-23T04:18:12+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}