---
id: "CVE-2026-101416"
kind: "vulnerability"
aliases: ["CVE-2026-101416"]
title: "Oracle PeopleSoft PeopleTools: PsAdmin flaw allows full takeover from adjacent network"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["on-prem", "oracle", "package", "peoplesoft", "peopletools"]
not_affected_if: ["isolated-network-segment", "other-peopletools-versions"]
published_at: "2026-10-20T22:17:49+00:00"
first_seen_at: "2026-10-23T21:57:21+00:00"
updated_at: "2026-10-25T03:22:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101416", "first_seen_at": "2026-10-23T21:57:21+00:00"}]
---

# Oracle PeopleSoft PeopleTools: PsAdmin flaw allows full takeover from adjacent network

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 contain a flaw in the PsAdmin component. An unauthenticated attacker on the physical communication segment attached to the host can compromise the PeopleTools installation and take it over.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm the installed PeopleTools release for versions `8.61`, `8.62` or `8.63`
- Check whether the host sits on a network segment reachable by untrusted hosts (unknown from sources)

## Fix

- Apply the Oracle Critical Patch Update for PeopleSoft PeopleTools covering this CVE (patch version unknown from sources)
- Restrict network access to the PeopleSoft host segment until patched

## Timeline

- 2026-10-23T21:57:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101416

## From the sources

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin).  Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_