Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

T2Critical 95Covered by 1 source · first reported by The Hacker News at 26 Sept, 11:46 UTC

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could…

security

Sources

• T2Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web ShellsThe Hacker News26 Sept, 11:46

Vulnerabilities

• CVE-2026-35273