Ctrl + K
/ news / CVE
CVE•Published 2026-07-21•Modified 2026-07-31•1 article on news•5 live references•NVD data

CVE-2026-61233Oracle · Peoplesoft_enterprise_fin_common_objects

Vulnerability data via NVD (ingested)

CVSS v3.1
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS percentile
37
Exploit Prediction Scoring System · top 63% of all CVEs
Weaknesses (CWE)
CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-284Improper Access ControlCWE-287Improper AuthenticationCWE-306Missing Authentication for Critical Function
Description

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Timeline
Published 2026-07-21
Modified 2026-07-31

External references

NVDMITREExploit-DBtrickest/cveVulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts
vuln:CVE-2026-61233
Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · product + version
product:"Oracle Peoplesoft Enterprise Fin Common Objects" version:"9.1"
Version-pinned fingerprint from NVD's first vulnerable CPE.
Shodan · banner/body mention
http.html:"Peoplesoft Enterprise Fin Common Objects"
HTTP body or banner mentions "Peoplesoft Enterprise Fin Common Objects" — catches deploys Shodan didn't identify as a product.
More intel sources (5)
Shodan report
vuln:CVE-2026-61233
Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-61233
Censys host search filtered to this CVE id.
grep.app
CVE-2026-61233
Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-61233
GitHub code search for direct mentions.
Google dork
"CVE-2026-61233" exploit -site:nvd.nist.gov
Write-ups and news, NVD excluded.

Known PoCs on GitHub

No public proof-of-concept repositories found for CVE-2026-61233 on GitHub.
Articles on news mentioning CVE-2026-61233