Live › vulnerability › CVE-2026-91486
Go to dashboardA flaw in the General Ledger component of Oracle PeopleSoft Enterprise FIN General Ledger Brazil 9.1 lets a low-privileged user who can log on to the underlying infrastructure modify or delete some accessible data. It can also cause a partial denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle PeopleSoft Enterprise FIN General Ledger Brazil 9.1, where users have logon access to the infrastructure hosting the application. The sources do not say whether remote or network-only access is enough to exploit it.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN General Ledger Brazil executes to compromise PeopleSoft Enterprise FIN General Ledger Brazil. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN General Ledger Brazil accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise FIN General Ledger Brazil. CVSS 3.1 Base Score 4.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).
This page as .md · .json · in your agent: get_signal("CVE-2026-91486")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.