Live › vulnerability › CVE-2026-91264
Go to dashboardOracle PeopleSoft Enterprise SCM Manufacturing 9.2 has a flaw in its Security component that an unauthenticated attacker can reach over HTTP. Exploitation is hard, and a successful attack can modify, insert or delete some accessible data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running PeopleSoft Enterprise SCM Manufacturing 9.2 with web access exposed to the network. Sites without this product or without HTTP exposure of it can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Manufacturing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM Manufacturing accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91264")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.