CVE-2026-60614: Improper Access Control

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Person Data. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise ...

PT-2026-62652

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A flaw in the Person Data component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

CVE-2026-40480

ChurchCRM suffers a Missing Object-Level Authorization (IDOR) in GET /api/person/{personId} prior to version 7.2.0, where the API path omits canEditPerson checks and enables any authenticated user with EditSelf privileges to enumerate and read other members’ records containing PII (names, address...