Oracle PeopleSoft vulnerability: How to find impacted assets

Oracle disclosed CVE-2026-35273, an SSRF vulnerability in the PeopleSoft Environment Management Hub (EMHub) that can be abused by unauthenticated remote attackers to chain outbound requests, achieve remote code execution, create administrative accounts, and obtain root-level control; affected versions are PeopleSoft 8.61 and 8.62, evidence indicates active exploitation in the wild, and users are urged to update immediately with provided detection guidance (runZero query) to locate impacted assets.