CVE-2026-60809

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

• CWE-200

• https://www.oracle.com/security-alerts/cpuoct2026.htmlVendor Advisory

Published

Oct 20, 2026

Last Modified

Oct 27, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-60803Vulnerability in the Siebel Apps - Marketing product of Orac…7.4
• CVE-2026-60804Vulnerability in the Oracle E-Business Intelligence product …2
• CVE-2026-60805Vulnerability in the Oracle Cost Management product of Oracl…6.2
• CVE-2026-60806Vulnerability in the Oracle Cost Management product of Oracl…7.5
• CVE-2026-60807Vulnerability in the Oracle Bills of Material product of Ora…8
• CVE-2026-60808Vulnerability in the Siebel Apps - Marketing product of Orac…7.5
• CVE-2026-60810Vulnerability in the Oracle Supply Chain Trading Connector p…8.2
• CVE-2026-60811Vulnerability in the Oracle Supply Chain Trading Connector p…6.3
• CVE-2026-60812Vulnerability in the Oracle Supply Chain Trading Connector p…6.5
• CVE-2026-60813Vulnerability in the Oracle iStore product of Oracle E-Busin…7.2
• CVE-2026-60814Vulnerability in the PeopleSoft Enterprise PeopleTools produ…3.9
• CVE-2026-60815Vulnerability in the Oracle iStore product of Oracle E-Busin…6.1