CVE-2026-101420

Summary

This vulnerability allows low-privileged attackers with network access to compromise PeopleSoft Enterprise PeopleTools through the SQR component, potentially leading to unauthorized data modification and access to critical system data.

Exploitability

The vulnerability is easily exploitable with low privileges over HTTP, requiring only network access to the affected PeopleSoft system.

Blast radius

Successful exploitation could impact multiple products within the PeopleSoft ecosystem, affecting all accessible data and potentially allowing unauthorized creation, deletion, or modification of critical information.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to PeopleTools version 8.64 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.