URL has been copied successfully!
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws


Tags: , , , ,

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week.Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/10/shinyhunters-exploited-oracle.html

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Beyond CVE: The hunt for other sources of vulnerability intel
  2. Patch Tuesday priorities: Vulnerabilities in SAP NetWeaver and Microsoft NTLM and Hyper-V
  3. NCSC Issues Alert on Active Exploitation of Oracle E-Business Suite 0-Day Vulnerability
  4. Google, Mandiant expose malware and zero-day behind Oracle EBS extortion