Live › vulnerability › CVE-2026-83427
Go to dashboardOracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 have a flaw in the Multichannel Framework component. A high-privileged attacker with network access over HTTP can take over the PeopleTools installation.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running PeopleSoft Enterprise PeopleTools 8.61 to 8.63 with the Multichannel Framework reachable over HTTP are in scope. The sources do not say whether the component is on by default, so unknown. Teams on other PeopleTools releases can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-83427")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.