CVE-2026-60821

A critical (CVSS 9.8) vulnerability in Oracle PeopleSoft's Business Interlink component (PeopleTools 8.61–8.63) allows unauthenticated remote attackers to fully compromise the application; apply Oracle's August 2026 CPU patches.